Hi Bob > One possibility: If you're doing sa-learn as one user, and qmail is > invoking spamd to run as a different user, you may be training one > Bayes database and spamd may be using a different database that isn't > trained.
> Bob Menschel I'm having some difficulty finding out exactly which user I should be running sa-learn is. The following is an output of 'ps -ef' from my mail server: # ps -ef UID PID PPID C STIME TTY TIME CMD root 1308 1 0 04:21 ? 00:00:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -stderrlogger=/usr/lib/courier-imap/sbin/courierlogger -st root 1343 1 0 04:21 ? 00:00:00 /usr/lib/courier-imap/sbin/courierlogger imapd root 1384 1 0 04:21 ? 00:00:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -stderrlogger=/usr/lib/courier-imap/sbin/courierlogger -st root 1401 1 0 04:21 ? 00:00:00 /usr/lib/courier-imap/sbin/courierlogger imapd-ssl qscand 1441 1 0 04:21 ? 00:00:00 lt-clamd start root 1852 1 0 04:21 ? 00:00:25 /usr/bin/sophie -D spamd 2501 1 0 04:22 ? 00:00:00 /usr/bin/spamd -d -q -m10 -s /var/log/spamd/spamd.log --pidfile=/var/run/spamd/spamd.pid --socketpath=/var/qmai root 2621 1 0 04:22 ? 00:00:00 /bin/sh /command/svscanboot root 2623 2621 0 04:22 ? 00:00:00 svscan /service root 2624 2621 0 04:22 ? 00:00:00 readproctitle service errors: ........................................................................ ......... root 2625 2623 0 04:22 ? 00:00:00 supervise qmail-send root 2626 2623 0 04:22 ? 00:00:00 supervise log root 2627 2623 0 04:22 ? 00:00:00 supervise qmail-smtpd root 2628 2623 0 04:22 ? 00:00:00 supervise log root 2629 2623 0 04:22 ? 00:00:00 supervise qmail-pop3d root 2630 2623 0 04:22 ? 00:00:00 supervise log root 2631 2623 0 04:22 ? 00:00:00 supervise qmail-pop3ds root 2632 2623 0 04:22 ? 00:00:00 supervise log qmails 2633 2625 0 04:22 ? 00:00:35 qmail-send vpopmail 2634 2627 0 04:22 ? 00:00:02 /usr/local/bin/tcpserver -v -H -R -l 0 -x /home/vpopmail/etc/tcp.smtp.cdb -c 100 -u 509 -g 502 0 smtp /usr/loca vpopmail 2635 2629 0 04:22 ? 00:00:01 /usr/local/bin/tcpserver -l 0 -R -H -v -u509 -g502 0 110 /var/qmail/bin/qmail-popup spock /home/vpopmail/bin/vc qmaill 2636 2626 0 04:22 ? 00:00:03 /usr/local/bin/multilog t s50000000 n30 /var/log/qmail qmaill 2638 2628 0 04:22 ? 00:02:46 /usr/local/bin/multilog ts10000000 n30 /var/log/qmail/smtpd qmaill 2645 2630 0 04:22 ? 00:00:00 multilog t /var/log/qmail/pop3d qmaill 2646 2632 0 04:22 ? 00:00:00 multilog t /var/log/qmail/pop3ds vpopmail 2647 2631 0 04:22 ? 00:00:00 /usr/local/bin/tcpserver -l 0 -R -H -v -u509 -g502 0 995 /usr/sbin/stunnel /usr/local/etc/pop3s.conf root 2651 2633 0 04:22 ? 00:00:03 qmail-lspawn ./Maildir/ qmailr 2652 2633 0 04:22 ? 00:00:01 qmail-rspawn qmailq 2653 2633 0 04:22 ? 00:00:07 qmail-clean root 29978 1 0 12:08 ? 00:00:06 /usr/bin/trophie -D spamd 10749 2501 0 15:49 ? 00:01:30 spamd child spamd 11089 2501 0 15:49 ? 00:01:20 spamd child spamd 11177 2501 1 15:49 ? 00:01:47 spamd child spamd 11463 2501 1 15:49 ? 00:01:41 spamd child spamd 11871 2501 0 15:50 ? 00:01:32 spamd child vpopmail 11980 2634 0 18:27 ? 00:00:00 /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true vpopmail 11983 11980 0 18:27 ? 00:00:00 /usr/local/bin/recordio /usr/local/bin/rblsmtpd -r relays.ordb.org -r bl.spamcop.net /var/qmail/bin/qmail-smtpd qscand 12052 11980 0 18:28 ? 00:00:00 /usr/bin/perl -T /dev/fd/4//var/qmail/bin/qmail-scanner-queue.pl spamd 12683 2501 0 18:31 ? 00:00:00 spamd child spamd 12698 2501 0 18:31 ? 00:00:00 spamd child spamd 12872 2501 0 18:31 ? 00:00:00 spamd child vpopmail 12942 2634 0 18:31 ? 00:00:00 /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true vpopmail 12943 12942 0 18:31 ? 00:00:00 /usr/local/bin/recordio /usr/local/bin/rblsmtpd -r relays.ordb.org -r bl.spamcop.net /var/qmail/bin/qmail-smtpd spamd 12953 2501 0 18:31 ? 00:00:00 spamd child spamd 12993 2501 0 18:31 ? 00:00:00 spamd child I'd appreciate it if anyone could spot the user. Regards Lee
<<winmail.dat>>