Re: [exim] SPAMASSASSIN UNIX socket

Top Page
Delete this message
Reply to this message
Author: majid alavizadeh
Date:  
To: exim-users
CC: Nigel Wade
Subject: Re: [exim] SPAMASSASSIN UNIX socket
using ACL "acl_check_data"
processing "accept"
check condition = ${if >={$message_size}{100000} {1}}
                =
accept: condition test failed
processing "warn"
check spam = nobody/defer_ok
trying server 127.0.0.1, port 783
LOG: MAIN PANIC
  spam acl condition: warning - spamd connection to 127.0.0.1, port
783 failed: Connection refused
LOG: MAIN PANIC
  spam acl condition: all spamd servers failed
warn: condition test failed
processing "accept"
check condition = ${if !def:spam_score_int {1}}
                = 1
check add_header = X-Spam-Note: SpamAssassin invocation failed
accept: condition test succeeded

>>Headers added by DATA ACL:

X-Spam-Note: SpamAssassin invocation failed
>>

unspool_mbox(): unlinking
'/var/spool/exim/scan/1NDELG-0004VO-6D/1NDELG-0004VO-6D.eml'




On Tue, Nov 24, 2009 at 5:48 PM, Nigel Wade <nmw@???> wrote:
> majid alavizadeh wrote:
>> firewall is of and i can telnet via 783
>>
>>
>> I type "spamc -d localhost -p 783 < TEST" (Test contains 'X') and
>> some random text in ssh command with this result:
>>
>>
>> spamc -d localhost -p 783 < TEST
>>
>> sdasda
>> sdas
>> dasd
>> asdasdads
>>
>> X-Spam-Flag: YES
>> X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.farahost.biz
>> X-Spam-Level: ********
>> X-Spam-Status: Yes, score=8.9 required=5.0 tests=EMPTY_MESSAGE,MISSING_DATE,
>>         MISSING_HB_SEP,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,
>>         NO_RECEIVED,NO_RELAYS,TVD_SPACE_RATIO autolearn=no version=3.2.5
>> X-Spam-Report:
>>         *  0.0 MISSING_MID Missing Message-Id: header
>>         *  0.0 MISSING_DATE Missing Date: header
>>         * -0.0 NO_RELAYS Informational: message was not relayed via SMTP
>>         *  2.5 MISSING_HB_SEP Missing blank line between message header and body
>>         *  1.6 MISSING_HEADERS Missing To: header
>>         *  2.9 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
>>         *  1.3 MISSING_SUBJECT Missing Subject: header
>>         *  0.6 EMPTY_MESSAGE Message appears to have no textual parts and no
>>         *      Subject: text
>>         * -0.0 NO_RECEIVED Informational: message has no Received headers
>>         *  0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
>>         *      headers
>>
>> Subject: [SPAM]
>> X-Spam-Prev-Subject: (nonexistent)
>>
>>
>>
>>
>>
>>
>>
>>
>>>  spamc -d localhost -p 783 < some_file
>>>
>>> or type something at the terminal (and random garbage will do, all
>>> you're testing is the connection to spamd):
>>>
>>>  spamc -d localhost -p 783
>>>
>>> enter some random text and press ctrl-d to give EOF.
>>>
>>
>>
>
> Ok, so spamd is definitely running, and listening on the correct port.
>
> The default spamd setup for Exim is the default for spamd, i.e.
> localhost on port 783. spamd_address should not be necessary. What
> happens if you remove the spamd_address from exim.conf?
>
> Try running Exim in interactive debug mode and entering a random message
> (Exim will produce copious output) [my input is preceded by **]:
>
> # exim -bh 1.2.3.4 -d-all+acl
> ...
> 220 mail.ion.le.ac.uk ESMTP Exim 4.63 Tue, 24 Nov 2009 14:07:26 +0000
> ** ehlo some.domain
> 250-mail.ion.le.ac.uk Hello some.domain [1.2.3.4]
> 250-SIZE 20971520
> 250-EXPN
> 250-PIPELINING
> 250-STARTTLS
> 250 HELP
> ** mail from:someone@somewhere
> 250 OK
> ** rcpt to:nmw@???
> ...
> 250 Accepted
> ** data
> 354 Enter message, ending with "." on a line by itself
> ** some random garbage
> ** .
> ...
>
> [somewhere in the output there should be the ACL check for spam]
>
> check spam = nobody
> trying server 127.0.0.1, port 783
> check condition = ${if and { { <{$message_size}{100k}} {
>>{$spam_score_int}{150}} } {1}{0} }
>                = 0
> deny: condition test failed
> processing "warn"
> check condition = ${if <{$message_size}{100k}{1}{0}}
>                = 1
> check set acl_m2 = X-Spam-Report: $spam_report
>                 = X-Spam-Report: Spam detection software, running on
> the system "mail.ion.le.ac.uk", has
>        identified this incoming email as possible spam.  The original message
>        has been attached to this so you can view it (if it isn't spam) or label
>        similar future email.  If you have any questions, see
>        the administrator of that system for details.
>        Content preview:  some random garbage [...]
>        Content analysis details:   (6.2 points, 5.5 required)
>        pts rule name              description
>        ---- ----------------------
> --------------------------------------------------
>        0.0 MISSING_MID            Missing Message-Id: header
>        0.0 MISSING_DATE           Missing Date: header
>        1.3 MISSING_HEADERS        Missing To: header
>        3.0 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
>        [score: 0.9044]
>        1.8 MISSING_SUBJECT        Missing Subject: header
>        0.1 RDNS_NONE              Delivered to trusted network by a host with
> no rDNS
> check set acl_m1 = X-Spam-Level: $spam_bar
>                 = X-Spam-Level: ++++++
> check set acl_m0 = X-Spam-Status: No, score=$spam_score
>                 = X-Spam-Status: No, score=6.2
> check set acl_c0 = No
> check spam = nobody:true
> warn: condition test succeeded
> processing "warn"
> check condition = ${if <{$message_size}{100k}{1}{0}}
>                = 1
> check spam = nobody
> check set acl_m0 = X-Spam-Status: Yes, score=$spam_score
>                 = X-Spam-Status: Yes, score=6.2
> check set acl_c0 = Yes
> warn: condition test succeeded
> processing "accept"
> accept: condition test succeeded
>
>
> --
> Nigel Wade, System Administrator, Space Plasma Physics Group,
>            University of Leicester, Leicester, LE1 7RH, UK
> E-mail :    nmw@???
> Phone :     +44 (0)116 2523548, Fax : +44 (0)116 2523555
>
> --
> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>




--
M Alavizadeh