Re: Email with no hits and required

2008-02-27 Thread Massimiliano Marini
Hi Jason,

 This is and always has been documented behaviour in Qmail-Scanner. 
 Please read the FAQ

I tried to find the link but I have not found. You may send me the
right link?

Cheers
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
It's easier to invent the future than to predict it.  -- Alan Kay


Re: Email with no hits and required

2008-02-26 Thread Massimiliano Marini
Any hint about it?

It might depend on the older version of qmail-scanner (1.25-st-qms)?

--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
It's easier to invent the future than to predict it.  -- Alan Kay


Re: Email with no hits and required

2008-02-26 Thread Randy Ramsdell

Massimiliano Marini wrote:

System: Debian with Qmail + QmailScanner + SpamAssassins + ClamAV
Installation: qmailrocks.org

I've updated SA (original from qmailrocks.org 3.0.2) to 3.2.4 
my locale.cf is :


rewrite_header Subject *SPAM*
report_safe 0
required_score 4
required_hits 5
use_bayes 1

Question 1. The email still tagged like this:

Received: from  ... [snip] ... with qmail-scanner-1.25-st-qms
(clamdscan: 0.83/705. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
^^
I've updated to 3.2.4
spamd -V :
SpamAssassin Server version 3.2.4
  running on Perl 5.8.4

  
I can only guess that you still have two versions of spamassasin 
installed. I would search the disk for multiple copies of 
spamd/spamc/spamassassin and remove the older version. Also remember 
that spamassassin  probably runs as non-root or at least, it should.



Question 2. And some email have this tag

X-Spam-Status: No, hits=? required=?

Why?

Cheers
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
It's easier to invent the future than to predict it.  -- Alan Kay
  




Re: Email with no hits and required

2008-02-26 Thread Massimiliano Marini
Hi Randy,

 I can only guess that you still have two versions of spamassasin 
 installed. I would search the disk for multiple copies of 
 spamd/spamc/spamassassin and remove the older version. Also remember 
 that spamassassin  probably runs as non-root or at least, it should.

I've searched the disk, but only one version of SA exists,
and /usr/bin/spamd runs as root:

-r-xr-xr-x   1 root root  27059 Feb 20 15:59 spamassassin
-r-xr-xr-x   1 root root 115226 Feb 20 15:59 spamc
-r-xr-xr-x   1 root root 102285 Feb 20 15:59 spamd

Any other idea?
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
It's easier to invent the future than to predict it.  -- Alan Kay


RE: Email with no hits and required

2008-02-26 Thread Robert - elists
 
 System: Debian with Qmail + QmailScanner + SpamAssassins + ClamAV
 Installation: qmailrocks.org
 
 I've updated SA (original from qmailrocks.org 3.0.2) to 3.2.4
 my locale.cf is :
 
 rewrite_header Subject *SPAM*
 report_safe 0
 required_score 4
 required_hits 5
 use_bayes 1
 
 Question 1. The email still tagged like this:
 
 Received: from  ... [snip] ... with qmail-scanner-1.25-st-qms
 (clamdscan: 0.83/705. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
 ^^
 I've updated to 3.2.4
 spamd -V :
 SpamAssassin Server version 3.2.4
   running on Perl 5.8.4
 
 Question 2. And some email have this tag
 
 X-Spam-Status: No, hits=? required=?
 
 Why?
 
 Cheers
 --
 Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/

Massimiliano,

The correct answer is this on our systems

setuidgid clamav /var/qmail/bin/qmail-scanner-queue.pl -z
setuidgid clamav /var/qmail/bin/qmail-scanner-queue.pl -g

be careful though, about the user you use... we use clamav user

when you are done and if I recall correctly, you should stop and restart all
necessary services to pull in the new config info so to speak.

The no hits part, I dunno. Could be to large message or whatever else... you
can debug that in the logs

 - rh



Re: Email with no hits and required

2008-02-26 Thread Jason Haar

Randy Ramsdell wrote:

Question 2. And some email have this tag

X-Spam-Status: No, hits=? required=?

Why?

This is and always has been documented behaviour in Qmail-Scanner. 
Please read the FAQ


--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1