Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
qmail scanner, SA - local.cf not working [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
deyab
n00b
n00b


Joined: 23 Jun 2004
Posts: 40

PostPosted: Mon Jul 25, 2005 3:53 am    Post subject: qmail scanner, SA - local.cf not working [SOLVED] Reply with quote

qmail + qmail-scanner + spamassassin + clamav

Overall, I got the setup working, but my email Subject is getting tagged. I just want the X-Spam headers attached to the email, but not the Subject line changed. My local.cf is as follows

# rewrite_header Subject *****SPAM*****
report_safe 0
skip_rbl_checks 1
required_score 6

I have tried adding
rewrite_header Subject
or
rewrite_header Subject 0

it makes no difference. As if the local.cf file is ignored. But that can not be the case - if I omit the required_score 6 line, I can see in the log that it is using default value of 5, and with required_score 6 included, value of 6 is used.


/var/spool/qmailscan/qmail-queue.log has this (email address changed, as I was spamming myself from a webmail to test)

Sun, 24 Jul 2005 21:34:02 CDT:8582: w_c: elapsed time from start 0.007309 secs
Sun, 24 Jul 2005 21:34:02 CDT:8582: return-path='XXXX@yahoo.com', recips='YYYY@mydomain.com'
Sun, 24 Jul 2005 21:34:02 CDT:8582: from='fname lname <XXXX@yahoo.com>', subj='get the loan you want', via SMTP from 68.142.207.nnn
Sun, 24 Jul 2005 21:34:02 CDT:8582: clamdscan: finished scan in 0.012731 secs
Sun, 24 Jul 2005 21:34:04 CDT:8582: SA: yup, this smells like SPAM - hits=9.3/6.0/6.0 - tagging message...
Sun, 24 Jul 2005 21:34:04 CDT:8582: SA: finished scan in 2.496321 secs - hits=9.3/6.0
Sun, 24 Jul 2005 21:34:04 CDT:8582: p_s: finished scan in 0.072531 secs

Can someone share working copy of local.cf that does not tag the subject line? Also, the subject line get's tagged like this
SPAM: HIGH * get the loan you want

That first part, SPAM: HIGH * just should not be there.

Thanks for any ideas! Let me know if more details about the setup is required..

Also, what is the difference between
-rws--x--x 1 qscand qscand 3380 Jul 20 22:53 /var/qmail/bin/qmail-scanner-queue
-rwxr-xr-x 1 qscand qscand 140137 Jul 24 19:28 /var/qmail/bin/qmail-scanner-queue.pl

qmail-scanner-queue is a binary, that in addition to whatever it does, seemingly call qmail-scanner-queue.pl. So what does qmail-scanner-queue does exactly?


Last edited by deyab on Mon Jul 25, 2005 6:02 pm; edited 2 times in total
Back to top
View user's profile Send private message
deyab
n00b
n00b


Joined: 23 Jun 2004
Posts: 40

PostPosted: Mon Jul 25, 2005 6:00 pm    Post subject: Re: qmail scanner, SA - local.cf not working [SOLVED] Reply with quote

deyab wrote:
Also, what is the difference between
-rws--x--x 1 qscand qscand 3380 Jul 20 22:53 /var/qmail/bin/qmail-scanner-queue
-rwxr-xr-x 1 qscand qscand 140137 Jul 24 19:28 /var/qmail/bin/qmail-scanner-queue.pl

qmail-scanner-queue is a binary, that in addition to whatever it does, seemingly call qmail-scanner-queue.pl. So what does qmail-scanner-queue does exactly?

qmail-scanner-queue.pl is the actual script. However, it needs to be setuid, which my perl install doesn't handle. So in my tcp.qmail-smtp, I am using qmail-scanner-queue which takes care of this problem, and then calls qmail-scanner-queue.pl


deyab wrote:
qmail + qmail-scanner + spamassassin + clamav

Overall, I got the setup working, but my email Subject is getting tagged. I just want the X-Spam headers attached to the email, but not the Subject line changed.

This because qmail-scanner-queue.pl is a big beast, and I have found out does a lot more than merely calling SA. I had to unset $sa_subject_site to get rid of the tagging in the Subject line.

Well, every once in a while I venture into fools paradise and assume a emerge takes care of all I want, and I don't have to actually read a 3000+ line perl script. :roll:

I think it would mighty nice if the emerge told me that qmail-scanner-queue.pl is god, and I might as well forget about my local.cf.. Maybe it did - and I didn't notice.
Back to top
View user's profile Send private message
wschalk
n00b
n00b


Joined: 30 Jan 2005
Posts: 38

PostPosted: Wed Jul 27, 2005 12:21 am    Post subject: Mail tagging Reply with quote

Hi,

this posting might help:

https://forums.gentoo.org/viewtopic-t-363560-highlight-spamassassin.html

Everybody tends to have the same problems...

All the best & cheers,
Werner
Back to top
View user's profile Send private message
deyab
n00b
n00b


Joined: 23 Jun 2004
Posts: 40

PostPosted: Wed Jul 27, 2005 12:32 am    Post subject: Reply with quote

Thanks Werner.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum