qmail-scanner some questions

[fdomartin]

I've installed PSA 7.5.4 on FC1 with ART yum sources

I've installed qmail-scanner from this sources.

If I check spam protection on PSA panel it do anything or qmail-scanner is allways running for all domains?

How I can change configuration for qmail-scanner for infected mails? Now it stores infected mails in quarantine directory but I would like send notification to original receiver.

How I can restart qmail-scanner? I modified /usr/bin/qmail-scanner-reconfigure and /var/qmail/bin/qmail-scanner-queue.pl but it appears do not anything.

How I can to teach spamassassin?

Is there some man about qmail-scanner?

Thanks.

[fdomartin]

I think spamassassin is not working because:

At now I recive a new headers on all emails like this:

Received: from xxx.xxx.xxx.xxx by server.com (envelope-from <user@server.com>, uid 2020) with qmail-scanner-1.25st (perlscan: 1.25st. Clear:RC:0(64.233.182.195):. Processed in 0.602691 secs); 25 Oct 2005 23:22:11 -0000

But I don't see any header about X-Spam or similar.

I have some daemons of SA running on box:

qmailq 21167 0.0 5.3 30484 25656 ? S 01:21 0:00 spamd child

Where is the mistake?

Thanks all.

[scott]

try running qmail-scanner-reconfigure, that should autodetect SA and add it to the qmail-scanner-queue.pl script

[fdomartin]

Now works well !!! A lot of thanks.

Code: Select all

Received: from xxx.xxx.xxx.xxx by server.com (envelope-from <user@server.com>, uid 2020) with qmail-scanner-1.25st  (spamassassin: 3.0.4. perlscan: 1.25st.   Clear:RC:0(64.233.182.194):SA:0(1.7/5.0):.  Processed in 4.477581 secs); 26 Oct 2005 14:24:05 -0000

X-Spam-Status: No, hits=1.7 required=5.0
X-Spam-Level: +

How I can teach SA ?

How I can send notify to receipt for quarantined emails?

[scott]

It has one common global bayes db in /var/qmail/.spamassassin, so just make sure youre using that as the path when you're using sa-learn

[fdomartin]

I can configure SA for autolearn? I see this headers in some emails.

Code: Select all

X-Spam-Status: No, score=0.1 required=7.0 tests=FORGED_RCVD_HELO,RCVD_BY_IP autolearn=ham version=3.0.4

And, Anything about send notification of quarentined emails by qmail-scanner?

Thanks a lot.

[jamesyeeoc]

Check the many options you can configure in the file:

/usr/share/qmail-scanner/qmail-scanner-queue.pl

Such as:

#Addresses that should be alerted of any quarantined Email
my $NOTIFY_ADDRS='none';

and

# st: Some people wants to quarantine spam in a different
# maildir folder than viruses, maybe to run sa-learn.
# The default is:
# my $smaildir_site="$vmaildir";
# But you can change it i.e. my $smaildir="spamdir";
# WARNING: if $smaildir it is not in the same 'file system' (partition)
# than $wmaildir, you have to change the routine 'sub email_quarantine_report'
# you will find the code commented in that routine.
my $smaildir_site="$vmaildir";

[scott]

On the learning question above, Spamassassin will autolearn ham if it scores below .1, and spam if it scores above 12 by default. You dont have to do anything special to turn that on, so its training itself now. Once it has a pool of 200 spam and 200 ham messages, bayesian filtering will go into effect.

[Galactic Zero]

Is there a way to see if the 200 of each has been reached?

[scott]

yeah: sa-learn --dump magic, check out the man pages for all the nitty gritty details

[fdomartin]

I think spamassassin is not autolearning

Code: Select all

X-Spam-Status: Yes, hits=18.0 required=5.0
X-Spam-Level: ++++++++++++++++++
X-Qmail-Scanner-Moved-X-Spam-Status: Yes, hits=18.0 required=5.0
X-Qmail-Scanner-Moved-X-Spam-Level: ++++++++++++++++++

[fdomartin]

I configured SA for store bayes on MySQL and I see:

Code: Select all

"id","username","spam_count","ham_count","token_count","last_expire","last_atime_delta","last_expire_reduce","oldest_token_age","newest_token_age"
"1","qmailq","810","256","69264","0","0","0","1130967759","1131343625"
"4","root","3251","192","99256","1130971851","0","0","1103757010","1131343410"

I run sa-learn like root, Is this right? I see qmailq user learn 810 and root learn 3251 all of learned is for global rules ?

----

I see it creates an AWL but all of this emails are SPAM, not HAM Is correct the name "Auto White List" or is a "Auto Black List"?

----
I've configured on /etc/mail/spamassassin/local.cf

Code: Select all

required_hits 5

And on /usr/share/qmail-scanner/qmail-scanner-queue.pl

Code: Select all

my $sa_delta_site='5';

 #st: if $spamc_subjec and $sa_delta are set, add in the subject the spam-level
          if ($sa_subject ne "" && $sa_delta) {
             if ($sa_score < ($required_hits+$sa_delta)) {
                $sa_subject .= "* ";
             } elsif ($sa_score > ($required_hits+(2 * $sa_delta))) {
                $sa_subject .= "*** ";
             } else {
                $sa_subject .= "** ";
             }

But when I receive an email
between 5 and 6.4 I recive subject SPAM? *
6.5 I recive subject SPAM? **
more than 6.5 I recive subject SPAM? ***

why?

I would like receive
5<10 SPAM? *
10<15 SPAM? **
15< SPAM? ***

[scott]

Id talk to the qmail-scanner folks about the nitty gritty details. I never really got into the delta stuff myself.

For SQL settings in SA, its a little tricky, my advice is to check out the wiki at spamassassin.org. I cant really help that much with sa-learn, since I use SA on a project gamera box, so I have to use a modified version of sa-learn to use imap.