LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 01-17-2008, 12:48 PM   #1
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Rep: Reputation: 15
CentOS Time Zone Issue & SpamAssassin?


Hi All,

I'm pretty much a linux newbie so please go easy. I'm not sure where this problem lies, but I'll be psyched if someone can help me solve it.

I am running a mailserver and spamassassin 3.1.9 on centos 2.6.18-8.1.8.el5.

All of my email is getting tagged by SpamAssassin as having failed the INVALID_TZ_EST test.

I figure this might have something to do with the March DST change, but from the tests I've found on the internet my OS seems OK.

Can anyone suggest where I might find an answer to this problem? Googling INVALID_TS_EST brings up precious few results that are difficult for me to follow.

Regards,

Jason

87268530
 
Old 01-17-2008, 02:10 PM   #2
Lenard
Senior Member
 
Registered: Dec 2005
Location: Indiana
Distribution: RHEL/CentOS/SL 5 i386 and x86_64 pata for IDE in use
Posts: 4,790

Rep: Reputation: 56
How about updating your system????

yum check-update

FYI: "centos 2.6.18-8.1.8.el5." is really CentOS 5.0 without any updates.
 
Old 01-17-2008, 02:54 PM   #3
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Check what tzdata package you have installed.

rpm -qa | grep tzdata

See if there are updates, then make sure you are linked from /etc/localtime to the correct timezone library.
 
Old 01-17-2008, 02:55 PM   #4
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
Thanks Len,

As it is a production mailserver, I try not to do too many mass updates fearing that it'll break something that is harder to fix than what I'm specifically trying to fix. Maybe I'll take a snapshot and do that tonight. I'll let you know if it corrects anything.
 
Old 01-17-2008, 02:57 PM   #5
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Quote:
Originally Posted by alfista View Post
Thanks Len,

As it is a production mailserver, I try not to do too many mass updates fearing that it'll break something that is harder to fix than what I'm specifically trying to fix. Maybe I'll take a snapshot and do that tonight. I'll let you know if it corrects anything.
Good move. Updating or upgrading a machine is not always the best option in Production without further tests. I'd suggest just going with my suggestion.
 
Old 01-17-2008, 03:03 PM   #6
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by trickykid View Post
Check what tzdata package you have installed.

rpm -qa | grep tzdata

See if there are updates, then make sure you are linked from /etc/localtime to the correct timezone library.
I updated

tzdata-2007d-1.el5

to

tzdata-2007k-1.el5

but I'm not 100% sure how to link from /etc/localtime as you describe (looking for links now). if I 'cat /etc/localtime' I get a bunch of garbage but do see 'EDT5EDT' near the end.
 
Old 01-17-2008, 03:15 PM   #7
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
Ok, I found a linking guide and created the symlink.

Do I need a reboot for it to take effect?

If not, it doesn't seem to have corrected anything, but then again, I wasn't sure this was the problem.
 
Old 01-17-2008, 03:23 PM   #8
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Yeah, by default /etc/localtime will be a binary format and not a symlink. A reboot will usually not work. Another thing you need to check is to make sure Postfix (if that's what your using with SpamAssassin) is not using it's own /etc/localtime sometimes found in /var/spool/postfix/etc

If the problem still persists, at least you've ruled it out and it's probably a spam assassin issue.
 
Old 01-17-2008, 03:36 PM   #9
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
Not sure what you mean - reboot will not work, or not help?

I'm using Scalix as a mailserver (with sendmail), which reports that it uses the local system for all date info.

I'll do a reboot tonight and spend some more time thinking about what could cause it. I'll try disabling the SA rule that is being violated as well, but that seems like a cheesy workaround where I fear this might be a symptom of a bigger problem.
 
Old 01-17-2008, 03:44 PM   #10
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Quote:
Originally Posted by alfista View Post
Not sure what you mean - reboot will not work, or not help?

I'm using Scalix as a mailserver (with sendmail), which reports that it uses the local system for all date info.

I'll do a reboot tonight and spend some more time thinking about what could cause it. I'll try disabling the SA rule that is being violated as well, but that seems like a cheesy workaround where I fear this might be a symptom of a bigger problem.
A reboot should not be required or will not affect it. You could possibly try to restart sendmail or any other services that are reflecting bad timezone or errors.
 
Old 01-17-2008, 03:47 PM   #11
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
that's the thing - I'm not sure that anything is reflecting bad timezones. SA is tagging all mail with INVALID_TZ_EST from many different servers, so I have to assume that it is a problem on my end. I'll keep poking and see what I find...

shouldn't

yum update spamassassin

work?
 
Old 01-17-2008, 03:53 PM   #12
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Do this I found on a thread after a google search:

Take a message that hit INVALID_TZ_EST when it got scanned run it through "spamassassin" manually. If it doesn't get hit when
run through "spamassassin" it's the synthesized received header, otherwise it's something else.

Something to do with headers from the looks. I found this info by following this mail-list archive on apache mail-lists: http://mail-archives.apache.org/mod_...t@graze.net%3e
 
Old 01-17-2008, 03:55 PM   #13
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
I also hit this page that describes the header tests config for spamassassin: http://spamassassin.apache.org/full/..._head_tests.cf

I've never messes with these myself but maybe some tweaking, you can eliminate such emails that aren't passing the correct TZ info, etc.
 
Old 01-17-2008, 04:20 PM   #14
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by trickykid View Post
I also hit this page that describes the header tests config for spamassassin: http://spamassassin.apache.org/full/..._head_tests.cf

I've never messes with these myself but maybe some tweaking, you can eliminate such emails that aren't passing the correct TZ info, etc.
I'm too old to start trying to understand regular expressions...

Sending myself a test message to gmail, and viewing the original text, it appears that my mailserver is not appending an 'EST' to the time, which I think the regex is looking for...

Thu, 17 Jan 2008 16:12:36 -0500

I have no idea where to start chasing this...
 
Old 01-17-2008, 08:10 PM   #15
alfista
LQ Newbie
 
Registered: Oct 2006
Posts: 24

Original Poster
Rep: Reputation: 15
updating amavisd-milter from 1.2.1 to 1.3.1 fixed the problem (strange that so few results exist in google for this problem).

Thanks to everyone for the help!
 
  


Reply

Tags
spamassassin, time, zone


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Centos 4.4, Spamassassin and ClamAV JediKnight2 Linux - Software 1 03-11-2007 10:09 AM
centos & madwifi rpm madness (weird dependency issue) angryfirelord Linux - Wireless Networking 3 10-05-2006 04:35 PM
Cannot set time/date to other time zone than UTC (Kubuntu) jamangold Ubuntu 1 12-23-2005 06:42 PM
Display the date and time from another time zone lothario Linux - Software 4 07-31-2004 04:27 PM
Setting System Time: kernel in wrong time zone warrenweiss Linux - General 7 05-15-2004 04:25 PM


All times are GMT -5. The time now is 06:46 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration