SpamSnake 10.10

[gachnar]

Ran into an issue when doing the spamassassin LINT test. Below is a few lines from the output. As you can see its not picking up the sa_user from earlier in the tutorial. Did I miss something?

================================================== =======

Jan 6 13:26:13.484 [1938] dbg: bayes: learner_new self=Mail::SpamAssassin::Plugin::Bayes=HASH(0x96ec 200), bayes_store_module=Mail::SpamAssassin::BayesStore: :SQL
Jan 6 13:26:13.494 [1938] dbg: bayes: using username: root
Jan 6 13:26:13.494 [1938] dbg: bayes: learner_new: got store=Mail::SpamAssassin::BayesStore::SQL=HASH(0x9 7adb50)
Jan 6 13:26:13.494 [1938] dbg: plugin: Mail::SpamAssassin::Plugin::Bayes=HASH(0x96ec200) implements 'learner_is_scan_available', priority 0
Jan 6 13:26:13.512 [1938] dbg: bayes: database connection established
Jan 6 13:26:13.512 [1938] dbg: bayes: found bayes db version 3
Jan 6 13:26:13.513 [1938] dbg: bayes: unable to initialize database for root user, aborting!

================================================== ==

I'm hoping its something I've missed doing, but no joy so far. Please help.

[Rocky]

That's a standard msg if your server is not actually processing mails. Once it starts to, that msg will change.

[gachnar]

Followed most of the guide... right to the end where I have discovered two problems. First one is below. Basically any address I have tried sending from gets bounced by greyfix.

Jan 7 13:46:17 spamsnake postfix/smtpd[1982]: NOQUEUE: reject: RCPT from: 450 4.7.1 <administrator@xxxxxxxxxx.com>: : Recipient address rejected: Greylisted by greyfix 0.3.9, try again in 60 seconds.

Second problem. I tried using the perl script to pull the AD users for the relay_recipients. The file was created, but it didn't populate. Got any insight?

[topdog]

Originally Posted by gachnar

.

Jan 7 13:46:17 spamsnake postfix/smtpd[1982]: NOQUEUE: reject: RCPT from: 450 4.7.1 <administrator@xxxxxxxxxx.com>: : Recipient address rejected: Greylisted by greyfix 0.3.9, try again in 60 seconds.

This is what greylisting is all about, the message is rejected with a 4xx code which means try again later. any smtp client that is not ratware should try again.

Actual bounces use the 5xx codes.

[gachnar]

EDIT:

I'm just kinda special. I did a google of greylist and found an answer to that first post. Here is the result of what happens when the message finally gets bounced back to me. It acts like ClamAV isn't configured quite right.

================================================== ==

Our virus detector failed to completely analyse a message you sent:-
To: administrator@xxxxxxxxxx.com
Subject:
Date: Fri Jan 7 14:37:31 2011
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner

================================================== ====

I did also try to send a plain text email, but that got bounced too. I'm at a loss here. No messages are getting through. Any help offered could and would be greatly appreciated.

[topdog]

This issue has been answered before please search the other spamsnake threads here and you should have the answer.

[gachnar]

It is a fresh VM that just has the files required for this setup. I am referencing SpamSnake

I checked to see if my filesystem was full. It is not.

I also tried to do the freshclam command and got the following...

ERROR: /var/log/clamav/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

[Rocky]

Could possibly be bad signatures. Go ahead and do a purge of clamav and reinstall it per the guide.

[gachnar]

Did that. now the command doesn't give me that error when I run freshclam.
All mail I send is still not getting through. Keeps going back to sender with that error I mentioned earlier about the message not being able to be completely processed by antivirus.

Let me know what configs you'd need me to post. I will be glad to oblige. I'm not making any headway on my own merit.

-------------------------------------------------------------

There does seem to be a big delay when I look at the mail.log after I send a test message. Right at the part:

Jan 10 11:19:39 spamsnake MailScanner[7700]: Connected to Processing Attempts Database
Jan 10 11:19:39 spamsnake MailScanner[7700]: Found 1 messages in the Processing Attempts Database
Jan 10 11:19:39 spamsnake MailScanner[7700]: Using locktype = flock

[Rocky]

Try this:

apt-get remove --purge clamav-daemon libclamav6
apt-get install clamav-deamon libclamav6
freshclam

Restart mailscanner

Look at your logs, and post any problems.

If that doesn't work, run mailscanner in debug mode and post errors.

How much RAM do you have dedicated to your system?