Debugging bayes w/ '--virtual-config-dir'

2012-11-28 Thread Tres Seaver 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Running SA 3.3.2 on Ubunto 12.04.

Here is how spamd is running:

 $ pgrep -lf spamd
 26110 /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs --max-children 5
  --helper-home-dir --username=vmail --nouser-config
  --virtual-config-dir=/home/vmail/spamassassin/%d/%l
  --syslog=/var/log/spamd.log --debug=all,bayes,check,config
  -d --pidfile=/var/run/spamd.pid
 26112 spamd child
 26113 spamd child

And the tokens for my account:

 # sa-learn --dump=magic\
--dbpath=/home/vmail/spamassassin/example.com/localname
 0.000  0  3  0  non-token data: bayes db version
 0.000  0   3109  0  non-token data: nspam
 0.000  0  24458  0  non-token data: nham
 0.000  0 177188  0  non-token data: ntokens
 0.000  0 1351290514  0  non-token data: oldest atime
 0.000  0 1354054449  0  non-token data: newest atime
 0.000  0  0  0  non-token data: last journal sync
   atime
 0.000  0 1354062194  0  non-token data: last expiry atime
 0.000  02764800  0  non-token data: last expire atime
   delta
 0.000  0   7488  0  non-token data: last expire
   reduction count

But I see nothing in the log for 'bayes' during normal processing;  I
only see entries immediately after restart (e.g., the nightly restart
after updating rulesets):

 # grep : bayes /var/log/spamd.log
 ... [25810] dbg: logger: adding facilities: all, bayes, check, config
 ... [26110] dbg: config: fixed relative path:
 /var/lib/spamassassin/3.003002/updates_spamassassin_org/23_bayes.cf
 ... [26110] dbg: config: using
 /var/lib/spamassassin/3.003002/updates_spamassassin_org/23_bayes.cf
 for included file
 ... [26110] dbg: bayes:
 learner_new self=Mail::SpamAssassin::Plugin::Bayes=HASH(0x2db7fe0),
 bayes_store_module=Mail::SpamAssassin::BayesStore::DBM
 ... [26110] dbg: bayes:
 learner_new: got
 store=Mail::SpamAssassin::BayesStore::DBM=HASH(0x26392f8)
 ... [26110] dbg: bayes: no dbs present, cannot tie DB R/O:
 /tmp/spamd-26110-init/.spamassassin/bayes_toks
 ... [26110] dbg: bayes: no dbs present, cannot tie DB R/O:
 /tmp/spamd-26110-init/.spamassassin/bayes_toks

Which smells to me as though the bayesian stuff is not enabled.  But:

 # grep bayes /etc/spamassassin/local.cf
 use_bayes 1
 bayes_auto_learn 1
 bayes_ignore_header X-Bogosity
 bayes_ignore_header X-Spam-Flag
 bayes_ignore_header X-Spam-Status
 #   and a well-trained bayes DB can save running rules, too

Any suggestions where I should be looking?


Tres.
- -- 
===
Tres Seaver  +1 540-429-0999  tsea...@palladion.com
Palladion Software   Excellence by Designhttp://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlC2f2EACgkQ+gerLs4ltQ6dTgCguD19mXz5hpTGoZcUVZtKg0+h
r3QAn2jZ8ASQ2K9gewoqVPxUOguJmuib
=vJVz
-END PGP SIGNATURE-

Fairly-Secure Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-28 Thread Ed Flecko 
I'm looking to set up a spam filtering server to replace our ISP's
spam filtering service.

I've seen this tutorial (
ftp://orn.mpg.de/pub/unix/mail/Fairly-Secure_Anti-SPAM_Gateway_Using_SpamAssassin.html#antivirus
) and I'd be very interested in YOUR opinion; do you think,
fundamentally, a server with these software packages could be an
effective combination at fighting spam? We're a (I guess) medium size
organization with appx. 1000 end users.

What about weaving clam-av into the mix?

Although this tutorial uses OpenBSD, I'll probably be using FreeBSD.

Thank you for your input!

:-)

Ed

Re: Fairly-Secure Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-28 Thread Ned Slider 

On 28/11/12 23:32, Ed Flecko wrote:

I'm looking to set up a spam filtering server to replace our ISP's
spam filtering service.

I've seen this tutorial (
ftp://orn.mpg.de/pub/unix/mail/Fairly-Secure_Anti-SPAM_Gateway_Using_SpamAssassin.html#antivirus
) and I'd be very interested in YOUR opinion; do you think,
fundamentally, a server with these software packages could be an
effective combination at fighting spam? We're a (I guess) medium size
organization with appx. 1000 end users.

What about weaving clam-av into the mix?

Although this tutorial uses OpenBSD, I'll probably be using FreeBSD.

Thank you for your input!

:-)

Ed



I use Postfix with Amavisd-new which allows SpamAssassin and Clam-AV to 
be easily integrated. I also use Postgrey for greylisting. I find this 
setup very flexible and efficient.


Clam-AV doesn't catch a huge amount on my mail flow - email borne 
trojans/viruses don't seem to be overly popular these days. You can get 
3rd party signatures for things like phishing although I've never tried 
these as I've trained SA to do a good job on catching phishing emails.


I'm running on Linux (RHEL5) but I guess the base OS is largely 
irrelevant so I'd use what you are comfortable with.


I guess there are many ways to skin this particular cat but the above 
setup works very well for me. In other words, I suspect you will get a 
number of different answers all providing effective solutions based 
around the use of SpamAssassin and/or Clam-AV. The difference mostly 
seems to be how you choose to integrate them into your mail server.