Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: Spamassassin and Exim4

From: Alex Samad <alex(at)samad.com.au>
Date: Tue Sep 25 2007 - 01:30:21 EDT


On Mon, Sep 24, 2007 at 04:03:47PM -0700, Andrew Sackville-West wrote:
> On Sun, Sep 23, 2007 at 06:40:58PM -0400, Daniel D Jones wrote:
> > On Monday 24 September 2007 15:50:58 Andrew Sackville-West wrote:
> > > On Sun, Sep 23, 2007 at 03:36:45PM -0400, Daniel D Jones wrote:
> >
> > > SA should log to /var/log/mail.info, and that's a good place to look
> > > for info...
> >
> > I have two spamd entries in mail.info:
> >
> > Sep 24 14:51:09 etch spamd[10151]: spamd: connection from localhost
> > [127.0.0.1] at port 43270
> > Sep 24 14:51:11 etch spamd[10151]: spamd: bad protocol: header error:
> > at /usr/sbin/spamd line 1671, <GEN4> line 1.
> > Sep 24 14:51:12 etch spamd[10150]: prefork: child states: II
> >
> > and
> >
> > Sep 24 15:26:20 etch spamd[10151]: spamd: connection from localhost
> > [127.0.0.1] at port 60337
> > Sep 24 15:26:26 etch spamd[10151]: spamd: bad protocol: header error: ÿôÿý_
> > at /usr/sbin/spamd line 1671, <GEN5> line 1.
> > Sep 24 15:26:26 etch spamd[10150]: prefork: child states: II
> >
> > If I'm interpreting this correctly, this was a couple of malformed messages
> > which caused spamd to choke. Apparently, then, spamd is being called and
> > passed the messages for examination.
>
> huh. I get copious output from spamd with every mail that hits it. How
> are you starting spamd?
>
> ps aux | grep spamd | grep -v grep

I might not be able to add much to the exim discussion but you can do

ps aux | grep [s]pamd
>
> ...
>
> >
> > I had that backwards. I thought nobody:true meant to only perform the actions
> > below when the check WAS true. So the colon signifies an OR, not an IF.
>
> essentially.
>
> ...
> >
> > I've reconfigured the file with your recommendations and restarted exim. I'm
> > still not getting any headers in any email, including obvious spam. Not sure
> > what's going on. Do you know of any way to verify that ACLs are actually
> > running?
>
> I really don't know other than to see them show up in the logs
> etc. Can you provide the pertinent part of exim4.conf? the entire ACL
> section would be good.
>
> A

-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Received on Tue Sep 25 01:31:13 2007

This archive was generated by hypermail 2.1.8 : Sun Oct 07 2007 - 05:52:32 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library