Topic: Spamfilter seems to have stopped working!

[raem]

dave simmons

Thats OK, spamd is running.

You said your other fresh install (I assume of 7.2) ran without any spam getting through. Maybe other settings are different.
What does this show
config show qpsmtpd

Can you run that on both servers and compare them

[dave simmons]

Hello Ray,

On problem machine I have:

qpsmtpd=service
Bcc=disabled
BccMode=cc
BccUser=maillog
DNSBL=enabled
LogLevel=8
MaxScannerSize=25000000
RBLList=sbl-xbl.spamhaus.org:whois.rfc-ignorant.org:dnsbl.njabl.org
RHSBL=enabled
RequireResolvableFromHost=no
SBLList=dsn.rfc-ignorant.org
access=public
status=enabled

On freshly installed machine I have exactly the same.

[raem]

dave simmons

On freshly installed machine I have exactly the same.

That config looks OK.
You must not be doing a fresh install of 7.2 though, as that is not the default configuration.

Time to list all the contribs, add ons or changes you have made to the server.

You could try to uninstall & reinstall spamassassin to see if that improves things.
Do all the following

rpm -e smeserver-spamassassin
rpm -e spamassassin
signal-event email-update

yum clean all
yum list updates
yum update

yum install spamassassin

[dave simmons]

Hello Ray,

The only difference between the machines is that the problem machine was installed with an older version of SME 7 and updated following the instructions elsewhere on this site.  The fresh install was carried out with a CD I downloaded yesterday, also from this site.  I chose the option to reformat the drive and perform a new install, so it should be a standard configuration.

I did restore from backup.  Does the restore from backup only bring over user files, or does it also change settings on the machine?

I haven't added any contribs to either machine - we're only a very small domain - a few web pages, 6 e-mail addresses plus an info@ address. 

I look sometimes at the contribs to see if there's anything which could be interesting for us, but because I don't know enough about the system I don't mess about.

That's what I've always liked about SME - it just works - I don't need to tinker with it!

I will follow your instructions and report back.

Thank you for taking the time for this.

[dave simmons]

Help!

First command failed:

rpm -e smeserver-spamassassin       

gives:

error: Failed dependencies:
         e-smith-spamassassin is needed by (installed) smeserver-support-1.6.0-39.el4.sme.noarch

I will wait for a reply before trying the commands in a different order

[newhopenet]

I'm trying to resolve what seems to be the exact symptoms that Dave has.

I get the same results on trying to re-install spamassassin.

[root@david ~]# rpm -e smeserver-spamassassin
error: Failed dependencies:
        e-smith-spamassassin is needed by (installed) smeserver-support-1.6.0-39.el4.sme.noarch
[root@david ~]#

[dave simmons]

I'm sorry to hear that someone else is having trouble, but also a bit relieved that it's not just me.

I just remembered a friend who also uses SME 7 - only for e-mail - and their domain gets loads more spam than us (many more users).

I gave him a call to ask if they were getting more spam the last few days -  and they're not.  He is using the same version as us - 7.2 - but he has not applied the last updates in the server-manager.  He didn't know that there were updates until I called.

He doesn't want to apply the updates to see if it breaks his machine (they really were having a big problem with spam before using SME).

Can it be the update that has caused the problem?

BTW.  Here is his config:

spamassassin=service
DNSAvailable=yes
MessageRetentionTime=90
OkLanguages=all
OkLocales=all
RejectLevel=0
ReportSafe=0
Sensitivity=medium
SkipRBLChecks=0
SortSpam=enabled
Subject=[SPAM]
SubjectTag=disabled
TagLevel=5
UseBayes=0
status=enabled

rpm -qa spamassassin gives:
spamassassin-3.2.2-43.el4

rpm -qa smeserver-spamassassin gives:
smeserver-spamassassin-1.4.0-14.el4.sme

config show qpsmtpd gives exactly the same output as on both my machines.

So his version of sa is older, but still working fine.

Could this be the problem?

[mudra]

I have been following this thread as we have been receiving more spam of late. I found that by changing my spam sensitivity to CUSTOM that the spam started to be blocked once again. Perhaps this was just conincidence as it has been working on and off for the last few days. I also had to import the GPG signature in order to update spam assassin. I hope that this may help someone. Mudra.

[brianr]

error: Failed dependencies:
         e-smith-spamassassin is needed by (installed) smeserver-support-1.6.0-39.el4.sme.noarch

that just means that there is another dependency - uninstall that first:

rpm -e smeserver-support

then do the other commands.

B.

[dave simmons]

Hi Brian, good to have you back.

Just one question - am I not risking breaking something else by uninstalling the smeserver-support?

Is it important?

What does it do?

[brianr]

Hi Brian, good to have you back.

Just one question - am I not risking breaking something else by uninstalling the smeserver-support?

Is it important?

What does it do?

I've been here all the tiime!

No real idea what it does, but i find it a little strange that it refers to "e-smith-spamassassin".

Please give us the result of

rpm -qa | grep spamassassin

here is mine:

smeserver-spamassassin-1.4.0-14.el4.sme
spamassassin-3.2.3-44.el4

Cheers

B.

[raem]

dave simmons

The fresh install was carried out with a CD I downloaded yesterday
I did restore from backup.

That means that all configuration is also restored. You have in effect created a replica of the server you originally backed up, including users, config & all server manager settings etc.
The only thing missing would be any add on contribs, and these would need to be reinstalled, but the config for those contribs would also have been restored. You said you did not install any extra contribs.

So that means one server has packages based on the 7.2 CD and it performed OK, whereas the other server has 7.2 + the latest updates and it performed problematically. The differences being the packages updated since the 7.2 CD was released. Hmmmm !

Do the uninstall & reinstall mentioned earlier, working around dependency issues that may arise.
I think you can use
rpm -e --force smeserver-spamassassin

I've lost contact with my server as my ISP is having a partial outage, so can't check.

Did you ever receive a message about importing the GPG key as suggested by Mudra & did you run the suggested command ?
Did you run sa-update as suggested earlier ?

Both the above seem to be issues that can cause the problem you are experiencing.

Look thoroughly in your /var/log/qpsmtpd/current log file for evidence that plugins are, or are not, working, and that messages detected as spam are being, or are not being, rejected. Follow through all the events associated with a message ID number.

[raem]

brianr

smeserver-spamassassin-1.4.0-14.el4.sme
spamassassin-3.2.3-44.el4

They were checked and reported as being the same earlier in this thread.

[dave simmons]

Hi Brian,

Sorry, didn't mean to offend!

Result is:

spamassassin-3.2.3-44.el4
smeserver-spamassassin-1.4.0-14.el4.sme
smeserver-spamassassin-features-0.0.2-0

I think this last one came in because of something I installed after reading another post on this forum.  By this I mean that it can't be the cause of the original problem because I only started tinkering after the spam filter stopped working.

[dave simmons]

In answer to Ray,

Yes - I have run all commands suggested in these posts, including the GPG.KEY import.

Will try again to remove spamassassin.

Have looked in the log file (via server-manager).  It seems that maybe some mails are being filtered out (no mails are arriving in junkmail folders- maybe they're just being thrown away).  I don't really understand what it says (I can post bits of it if you like).  I am seeing a 4-figure number in the 3rd column.  There are maybe 50 entries with the same number.  Is this referring to different operations on the same message?  The numbers are rising, but not consecutive - there are gaps in between.