spamassassin trouble

davidstvz · 09-25-2008, 12:14 PM

I have this server which supposedly has SpamAssassin installed. I did:

ps -aux | grep spamd

...and that is indeed running.

**EDIT** This is a mistake. There is no spamd running... (and I'm not sure there is ever supposed to be)

However, I'm not sure if any spam filtering is happening. I went to my yahoo mail account and sent the following message to the server:

subject: spm test

body: blah blah blah Penis Enlargement blah blah blah

Now there is a rule in my /etc/mail/spamassassin/ local.cf file that looks like this:

body LOCAL_PENIS_RULE =~ /Penis Enlargement/i
score LOCAL_PENIS_RULE 10

I don't think that email should have gone through. What else can I check to make sure this thing is actually working correctly?

I believe amavisd should be filtering the mail once spamassassin has tagged it

davidstvz · 09-25-2008, 12:37 PM

OK, let's start over.

I'm running Free BSD 5.2.1 with sendmail. Before vanishing into the night (i.e. resigning) the previous admin wrote the following flow chart:

Code:

sendmail-rx --> amavisd --> sendmail-tx
                   |
                   |
                clamav
                spamassassin

That's how he wrote it. He explained that the sendmail-rx receives mail from outside and also outgoing user email, passes it through the spam and virus filter and then the sendmail-tx either sends the mail out to the world or dumps it in the users inbox depending on where it was originally headed.

All I really want to do at the moment is tweak the spamassassin configuration as one very important user is complaining about getting massive spam.

I suspect the spam filter isn't even on at the moment. Any help troubleshooting this would be appreciated.

bathory · 09-25-2008, 01:46 PM

Quote:

body LOCAL_PENIS_RULE =~ /Penis Enlargement/i
score LOCAL_PENIS_RULE 10

You don't need the =~ before the string you're trying to catch. For more detail take a look here.
Don't forget to run

Code:

spamassassin --lint

to test your configuration.

davidstvz · 09-25-2008, 02:30 PM

I did spamassassin --lint and got:

Code:

Can't load '/usr/local/lib/perl5/site_perl/5.10.0/i386-freebsd/auto/HTML/Parser/Parser.so' for module HTML::Parser: /usr/local/lib/perl5/site_perl/5.10.0/i386-freebsd/auto/HTML/Parser/Parser.so: Undefined symbol "PL_unitcheckav" at /usr/local/lib/perl5/5.8.8/i386-freebsd/XSLoader.pm line 70.
 at /usr/local/lib/perl5/site_perl/5.10.0/i386-freebsd/HTML/Parser.pm line 17
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/HTML.pm line 26.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/HTML.pm line 26.
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Message/Node.pm line 42.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Message/Node.pm line 42.
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Message.pm line 49.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Message.pm line 49.
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin.pm line 73.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin.pm line 73.
Compilation failed in require at /usr/local/bin/spamassassin line 79.
BEGIN failed--compilation aborted at /usr/local/bin/spamassassin line 79.

No wonder it's not running. Any idea what all that means?

bathory · 09-25-2008, 04:58 PM

From the 1st line of the error you get it seems that you've upgraded perl from 5.8.8 to the latest 5.10.0 and that the HTML::Parser module was installed using 5.8.8.
I think that you should reinstall spamassassin (dependencies, like HTML::Parser etc must be reinstalled first) to use the newer perl.

davidstvz · 09-25-2008, 06:06 PM

oh wonderful...

that's exactly the kind of thing I was trying to avoid

me and freebsd aren't very friendly, I was going to migrate this machine to open suse 10 at the end of the year.