Re: [exim] SPAMASSASSIN UNIX socket

Top Page
Delete this message
Reply to this message
Author: Nigel Wade
Date:  
To: exim-users
Subject: Re: [exim] SPAMASSASSIN UNIX socket
majid alavizadeh wrote:
> firewall is of and i can telnet via 783
>
>
> I type "spamc -d localhost -p 783 < TEST" (Test contains 'X') and
> some random text in ssh command with this result:
>
>
> spamc -d localhost -p 783 < TEST
>
> sdasda
> sdas
> dasd
> asdasdads
>
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.farahost.biz
> X-Spam-Level: ********
> X-Spam-Status: Yes, score=8.9 required=5.0 tests=EMPTY_MESSAGE,MISSING_DATE,
>         MISSING_HB_SEP,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,
>         NO_RECEIVED,NO_RELAYS,TVD_SPACE_RATIO autolearn=no version=3.2.5
> X-Spam-Report:
>         *  0.0 MISSING_MID Missing Message-Id: header
>         *  0.0 MISSING_DATE Missing Date: header
>         * -0.0 NO_RELAYS Informational: message was not relayed via SMTP
>         *  2.5 MISSING_HB_SEP Missing blank line between message header and body
>         *  1.6 MISSING_HEADERS Missing To: header
>         *  2.9 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
>         *  1.3 MISSING_SUBJECT Missing Subject: header
>         *  0.6 EMPTY_MESSAGE Message appears to have no textual parts and no
>         *      Subject: text
>         * -0.0 NO_RECEIVED Informational: message has no Received headers
>         *  0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
>         *      headers

>
> Subject: [SPAM]
> X-Spam-Prev-Subject: (nonexistent)
>
>
>
>
>
>
>
>
>> spamc -d localhost -p 783 < some_file
>>
>> or type something at the terminal (and random garbage will do, all
>> you're testing is the connection to spamd):
>>
>> spamc -d localhost -p 783
>>
>> enter some random text and press ctrl-d to give EOF.
>>
>
>


Ok, so spamd is definitely running, and listening on the correct port.

The default spamd setup for Exim is the default for spamd, i.e.
localhost on port 783. spamd_address should not be necessary. What
happens if you remove the spamd_address from exim.conf?

Try running Exim in interactive debug mode and entering a random message
(Exim will produce copious output) [my input is preceded by **]:

# exim -bh 1.2.3.4 -d-all+acl
...
220 mail.ion.le.ac.uk ESMTP Exim 4.63 Tue, 24 Nov 2009 14:07:26 +0000
** ehlo some.domain
250-mail.ion.le.ac.uk Hello some.domain [1.2.3.4]
250-SIZE 20971520
250-EXPN
250-PIPELINING
250-STARTTLS
250 HELP
** mail from:someone@somewhere
250 OK
** rcpt to:nmw@???
...
250 Accepted
** data
354 Enter message, ending with "." on a line by itself
** some random garbage
** .
...

[somewhere in the output there should be the ACL check for spam]

check spam = nobody
trying server 127.0.0.1, port 783
check condition = ${if and { { <{$message_size}{100k}} {
>{$spam_score_int}{150}} } {1}{0} }

                = 0
deny: condition test failed
processing "warn"
check condition = ${if <{$message_size}{100k}{1}{0}}
                = 1
check set acl_m2 = X-Spam-Report: $spam_report
                 = X-Spam-Report: Spam detection software, running on
the system "mail.ion.le.ac.uk", has
    identified this incoming email as possible spam.  The original message
    has been attached to this so you can view it (if it isn't spam) or label
    similar future email.  If you have any questions, see
    the administrator of that system for details.
    Content preview:  some random garbage [...]
    Content analysis details:   (6.2 points, 5.5 required)
    pts rule name              description
    ---- ----------------------
--------------------------------------------------
    0.0 MISSING_MID            Missing Message-Id: header
    0.0 MISSING_DATE           Missing Date: header
    1.3 MISSING_HEADERS        Missing To: header
    3.0 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
    [score: 0.9044]
    1.8 MISSING_SUBJECT        Missing Subject: header
    0.1 RDNS_NONE              Delivered to trusted network by a host with
no rDNS
check set acl_m1 = X-Spam-Level: $spam_bar
                 = X-Spam-Level: ++++++
check set acl_m0 = X-Spam-Status: No, score=$spam_score
                 = X-Spam-Status: No, score=6.2
check set acl_c0 = No
check spam = nobody:true
warn: condition test succeeded
processing "warn"
check condition = ${if <{$message_size}{100k}{1}{0}}
                = 1
check spam = nobody
check set acl_m0 = X-Spam-Status: Yes, score=$spam_score
                 = X-Spam-Status: Yes, score=6.2
check set acl_c0 = Yes
warn: condition test succeeded
processing "accept"
accept: condition test succeeded



-- 
Nigel Wade, System Administrator, Space Plasma Physics Group,
            University of Leicester, Leicester, LE1 7RH, UK
E-mail :    nmw@???
Phone :     +44 (0)116 2523548, Fax : +44 (0)116 2523555