Blank Emails, Spam and Errors..

[RooMeat]

OK.. So I have removed the 4psa products and installed ASL qmail scanner.
But now I have several issues.
1. Heaps of blank emails.
They are totally blank. No Sent address, no To address and no content.
The headers look like the following:

Code: Select all

DomainKey-Status: bad format
Received: (qmail 25196 invoked by uid 10041); 3 Jun 2010 20:00:12 +1000
Received: from  by oz.worldofhosting.com (envelope-from <ossec@oz.worldofhosting.com>, uid 2021) with qmail-scanner-2.08st 
 (clamdscan: 0.96.1/11128. spamassassin: 3.2.5. perlscan: 2.08st.  
 Clear:RC:1(127.0.0.1):. 
 Processed in 0.231692 secs); 03 Jun 2010 10:00:12 -0000
Delivered-To: root@localhost

2. Spam by the truck load.
4psa and ASL may not be compatible but while I had spam guardian loaded I never seen spam emails. Now I am getting bucket loads of them.
They ARE marked (*****SPAM**** HIGH). How do I make it so that they are deleted rather than delivered?

3. Errors when updating spam rules.

[root@oz tmp]# sa-update --allowplugins --channel saupdates.openprotect.com --channel updates.spamassassin.org
[root@oz tmp]# /etc/init.d/spamassassin condrestart
Shutting down spamd: [ OK ]
/etc/init.d/spamassassin: line 66: /usr/bin/createsock: No such file or directory
chmod: cannot access `/tmp/spamd_full.sock': No such file or directory
chown: cannot access `/tmp/spamd_full.sock': No such file or directory
Starting spamd: [ OK ]
[root@oz tmp]#

4. Clamscan causing Very high loads.
When I run top - I see the following:

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
6470 root 20 0 432m 688 660 R 123.6 0.0 9597:52 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_05_24-06:40:01.log /
13440 root 20 0 434m 696 668 R 82.4 0.0 6776:38 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_05_26-06:40:02.log /
25943 root 20 0 439m 212m 948 R 82.4 5.6 1331:08 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_06_01-06:40:01.log /
27445 root 20 0 439m 700 672 R 82.4 0.0 5403:58 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_05_27-06:40:02.log /
17870 root 20 0 432m 688 660 R 41.2 0.0 11042:04 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_05_23-06:40:02.log /
24166 root 20 0 440m 1892 904 R 41.2 0.0 2645:06 /usr/bin/clamscan --stdout --recursive --infected --exclude=/usr/share/doc/clamav-*/test/ --log=/usr/local/cserver/scan/2010_05_30-06:40:01.log /

I thought this might have been from spam guardian but I guess not seeing as it's now removed. How can I correct this??

[Highland]

#2 - Edit /etc/qmail-scanner.ini and run qmail-scanner-reconfigure

#4 - ART uses clamd instead of clamscan.

[scott]

The two settings are:

SA_DELETE=""
and
SA_REJECT=""

SA_DELETE is the number of points above the required_hits that it will delete at. And SA_REJECT will tell it to reject the message to the sender instead of deleting it. My personal settings are:

required_hits = 4
sa_delete = 6

So mail scoring 10 or above is deleted.

[RooMeat]

required_hits = 4
sa_delete = 6

Do I just add the REQUIRED_HITS="4" to the ini file?? as it is not in there at all.

#4 - ART uses clamd instead of clamscan.

Yes.. so how do I fix it??

How about issues 1 & 3???

[scott]

required_hits is a spamassassin setting. To your latter question, I have no idea. Its not from atomic or asl.

[RooMeat]

required_hits is a spamassassin setting.

So what file do I set this in?

To your latter question, I have no idea. Its not from atomic or asl.

It seems to be a linux default program.. but how to get rid of it?

What about Number 1??

[RooMeat]

From more research.. it has somehow been installed with clamav.
Now.. if I try to remove clamav, I need to remove all of asl as well.
Seems a bit strange if it's all tied together.. yet asl doesnt use it or know anything about it??

[scott]

1. No idea. Sounds like something is leftover from 4psa maybe?

4. Ditto. We do not use it. For anything. Perhaps 4psa does, have you tried asking them?

[RooMeat]

required_hits is a spamassassin setting.

So what file do I set this in?

[Kalimari]

required_hits is a spamassassin setting.

So what file do I set this in?

/etc/mail/spamassassin/local.cf