Hi Bob

> One possibility: If you're doing sa-learn as one user, and qmail is
> invoking spamd to run as a different user, you may be training one
> Bayes database and spamd may be using a different database that isn't
> trained.

> Bob Menschel 

I'm having some difficulty finding out exactly which user I should be
running sa-learn is.

The following is an output of 'ps -ef' from my mail server:

# ps -ef
UID        PID  PPID  C STIME TTY          TIME CMD
root      1308     1  0 04:21 ?        00:00:00
/usr/lib/courier-imap/libexec/couriertcpd -address=0
-stderrlogger=/usr/lib/courier-imap/sbin/courierlogger -st
root      1343     1  0 04:21 ?        00:00:00
/usr/lib/courier-imap/sbin/courierlogger imapd
root      1384     1  0 04:21 ?        00:00:00
/usr/lib/courier-imap/libexec/couriertcpd -address=0
-stderrlogger=/usr/lib/courier-imap/sbin/courierlogger -st
root      1401     1  0 04:21 ?        00:00:00
/usr/lib/courier-imap/sbin/courierlogger imapd-ssl
qscand    1441     1  0 04:21 ?        00:00:00 lt-clamd start
root      1852     1  0 04:21 ?        00:00:25 /usr/bin/sophie -D
spamd     2501     1  0 04:22 ?        00:00:00 /usr/bin/spamd -d -q
-m10 -s /var/log/spamd/spamd.log --pidfile=/var/run/spamd/spamd.pid
--socketpath=/var/qmai
root      2621     1  0 04:22 ?        00:00:00 /bin/sh
/command/svscanboot
root      2623  2621  0 04:22 ?        00:00:00 svscan /service
root      2624  2621  0 04:22 ?        00:00:00 readproctitle service
errors:
........................................................................
.........
root      2625  2623  0 04:22 ?        00:00:00 supervise qmail-send
root      2626  2623  0 04:22 ?        00:00:00 supervise log
root      2627  2623  0 04:22 ?        00:00:00 supervise qmail-smtpd
root      2628  2623  0 04:22 ?        00:00:00 supervise log
root      2629  2623  0 04:22 ?        00:00:00 supervise qmail-pop3d
root      2630  2623  0 04:22 ?        00:00:00 supervise log
root      2631  2623  0 04:22 ?        00:00:00 supervise qmail-pop3ds
root      2632  2623  0 04:22 ?        00:00:00 supervise log
qmails    2633  2625  0 04:22 ?        00:00:35 qmail-send
vpopmail  2634  2627  0 04:22 ?        00:00:02 /usr/local/bin/tcpserver
-v -H -R -l 0 -x /home/vpopmail/etc/tcp.smtp.cdb -c 100 -u 509 -g 502 0
smtp /usr/loca
vpopmail  2635  2629  0 04:22 ?        00:00:01 /usr/local/bin/tcpserver
-l 0 -R -H -v -u509 -g502 0 110 /var/qmail/bin/qmail-popup spock
/home/vpopmail/bin/vc
qmaill    2636  2626  0 04:22 ?        00:00:03 /usr/local/bin/multilog
t s50000000 n30 /var/log/qmail
qmaill    2638  2628  0 04:22 ?        00:02:46 /usr/local/bin/multilog
ts10000000 n30 /var/log/qmail/smtpd
qmaill    2645  2630  0 04:22 ?        00:00:00 multilog t
/var/log/qmail/pop3d
qmaill    2646  2632  0 04:22 ?        00:00:00 multilog t
/var/log/qmail/pop3ds
vpopmail  2647  2631  0 04:22 ?        00:00:00 /usr/local/bin/tcpserver
-l 0 -R -H -v -u509 -g502 0 995 /usr/sbin/stunnel
/usr/local/etc/pop3s.conf
root      2651  2633  0 04:22 ?        00:00:03 qmail-lspawn ./Maildir/
qmailr    2652  2633  0 04:22 ?        00:00:01 qmail-rspawn
qmailq    2653  2633  0 04:22 ?        00:00:07 qmail-clean
root     29978     1  0 12:08 ?        00:00:06 /usr/bin/trophie -D
spamd    10749  2501  0 15:49 ?        00:01:30 spamd child
spamd    11089  2501  0 15:49 ?        00:01:20 spamd child
spamd    11177  2501  1 15:49 ?        00:01:47 spamd child
spamd    11463  2501  1 15:49 ?        00:01:41 spamd child
spamd    11871  2501  0 15:50 ?        00:01:32 spamd child
vpopmail 11980  2634  0 18:27 ?        00:00:00
/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true
vpopmail 11983 11980  0 18:27 ?        00:00:00 /usr/local/bin/recordio
/usr/local/bin/rblsmtpd -r relays.ordb.org -r bl.spamcop.net
/var/qmail/bin/qmail-smtpd
qscand   12052 11980  0 18:28 ?        00:00:00 /usr/bin/perl -T
/dev/fd/4//var/qmail/bin/qmail-scanner-queue.pl
spamd    12683  2501  0 18:31 ?        00:00:00 spamd child
spamd    12698  2501  0 18:31 ?        00:00:00 spamd child
spamd    12872  2501  0 18:31 ?        00:00:00 spamd child
vpopmail 12942  2634  0 18:31 ?        00:00:00
/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true
vpopmail 12943 12942  0 18:31 ?        00:00:00 /usr/local/bin/recordio
/usr/local/bin/rblsmtpd -r relays.ordb.org -r bl.spamcop.net
/var/qmail/bin/qmail-smtpd
spamd    12953  2501  0 18:31 ?        00:00:00 spamd child
spamd    12993  2501  0 18:31 ?        00:00:00 spamd child



I'd appreciate it if anyone could spot the user.


Regards
Lee

<<winmail.dat>>

Reply via email to