Topic: ClamAV and Spamassassin problem

[kosebamse]

Hi,

I got the following problem on a fresh SME 7.1.3, no contribs installed. Spamassassin and ClamAV aren't working. There are no tags in the mail header (and SPAM isn't recogniced as well as a test with eicar failed too)

First I found an error message in clamd log:

Code: [Select]


2007-05-17 16:50:00.270168500 ERROR: Parse error at line 20: Option FixStaleSocket requires boolean argument.
2007-05-17 16:50:00.270174500 ERROR: Can't open/parse the config file /etc/clamd.conf

So I changed /etc/e-smith/templates/etc/clamd.conf/FixStaleSocket to a boolean value.
I got rid of the errormessage but they still won't work:

Code: [Select]


[root@murmel ~]# spamd status
[4541] error: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
spamd: could not create INET socket on 127.0.0.1:783: Address already in use
[root@murmel ~]# clamd status
Running as user clamav (UID 407, GID 402)
clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i386)
Log file size limited to 1048576 bytes.
Reading databases from /var/clamav
Loaded 116389 signatures.
ERROR: Socket file /var/clamav/clamd.socket is in use by another process.


There are no errors in the clamd and spamd log:

Code: [Select]


2007-05-17 18:11:23.009595500 Running as user clamav (UID 407, GID 402)
2007-05-17 18:11:23.025179500 clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i386)
2007-05-17 18:11:23.025183500 Log file size limited to 1048576 bytes.
2007-05-17 18:11:23.025184500 Reading databases from /var/clamav
2007-05-17 18:12:11.871567500 Loaded 116389 signatures.
2007-05-17 18:12:11.880528500 Unix socket file /var/clamav/clamd.socket
2007-05-17 18:12:11.880586500 Setting connection queue length to 30
2007-05-17 18:12:11.880646500 Listening daemon: PID: 3389
2007-05-17 18:12:11.880682500 Archive: Archived file size limit set to 15728640 bytes.
2007-05-17 18:12:11.880709500 Archive: Recursion level limit set to 8.
2007-05-17 18:12:11.880734500 Archive: Files limit set to 1500.
2007-05-17 18:12:11.880817500 Archive: Compression ratio limit set to 300.
2007-05-17 18:12:11.880843500 Archive support enabled.
2007-05-17 18:12:11.880868500 Algorithmic detection enabled.
2007-05-17 18:12:11.880892500 Portable Executable support enabled.
2007-05-17 18:12:11.880916500 ELF support enabled.
2007-05-17 18:12:11.880942500 Mail files support enabled.
2007-05-17 18:12:11.880968500 Mail: Recursion level limit set to 64.
2007-05-17 18:12:11.880992500 OLE2 support enabled.
2007-05-17 18:12:11.881016500 PDF support disabled.
2007-05-17 18:12:11.881040500 HTML support enabled.
2007-05-17 18:12:11.881064500 Self checking every 1800 seconds.


Code: [Select]


2007-05-17 18:11:10.336946500 [2489] info: config: failed to parse, now a plugin, skipping: ok_languages all
2007-05-17 18:11:11.991011500 [2489] warn: pyzor: check failed: internal error
2007-05-17 18:11:11.996005500 [2489] info: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
2007-05-17 18:11:12.001009500 [2489] info: rules: meta test VIRUS_WARNING_DOOM_BNC has undefined dependency 'VIRUS_WARNING_MYDOOM4'
2007-05-17 18:11:12.104878500 [2489] info: spamd: server started on port 783/tcp (running version 3.1.8)
2007-05-17 18:11:12.105029500 [2489] info: spamd: server pid: 2489
2007-05-17 18:11:12.114477500 [2489] info: spamd: server successfully spawned child process, pid 2634
2007-05-17 18:11:12.124810500 [2489] info: spamd: server successfully spawned child process, pid 2635
2007-05-17 18:11:12.127667500 [2489] info: prefork: child states: II


How do I get them to work?

Many thanks in advance,
Kose

[compdoc]

Dont want to assume, so do you have server-manager>email>change email filtering settings>Virus scanning and Spam filtering enabled?

what's your settings for Spam sensitivity and tagging level and rejection level?

By default, most of spamassassin's modules are disabled. I've written a script that shows whats enabled, and allows you to enable them, if you want it...

[ReetP]

"By default, most of spamassassin's modules are disabled. I've written a script that shows whats enabled, and allows you to enable them, if you want it..."

Any chance of a copy of your script ? !

Or is it downloadable someplace ?

B. Rgds

[kevinb]

I too am interested in this. We have the SA settings maxed and still we get hundreds of SPAM a day and only a low percentage are caught.

[chris burnat]

I too am interested in this. We have the SA settings maxed and still we get hundreds of SPAM a day and only a low percentage are caught.

You may have DNSBL=disabled and RHSBL=disabled
Check Bug #3306 and Bug #3312

[mmccarn]

I recommend using smeserver-spamassassin-features to configure reasonable antispam values for spamassassin, rhsbl, dnsbl, and bayesian filtering: http://wiki.contribs.org/Email#Setup_Blacklists_.26_Bayesian_Autolearning

Then, setup LearnAsSpam.pl so you can train your bayesian filters.