SpamAssassin is not checking mails

E

eduardo.mejia

Verified User
Joined
Mar 30, 2012
Messages
15
Hello Forum

Today I folllow the steps to add spamassassin to the new server http://help.directadmin.com/item.php?id=36
And when I see the ../exim/mainlog queue

I never found spamd process running.


tail -f /var/log/exim/mainlog

2012-04-03 16:54:18 1SFBgA-00080b-FH => prueba <[email protected]> F=<[email protected]> R=virtual_user T=virtual_localdelivery S=2422

2012-04-03 16:54:18 1SFBgA-00080b-FH Completed

2012-04-03 16:55:59 1SFBhn-000819-1r <= [email protected] H=mail-iy0-f176.google.com [209.85.210.176] P=esmtps X=TLSv1:RC4-SHA:128 S=1846 id=CALeGGkh919uF1-iw8Ma04FMfGWmvyCH00huKQdqve4E9vzC3vA@mail.gmail.com T="viagra" from <[email protected]> for [email protected]

2012-04-03 16:55:59 1SFBhn-000819-1r => prueba <[email protected]> F=<[email protected]> R=virtual_user T=virtual_localdelivery S=1964

2012-04-03 16:55:59 1SFBhn-000819-1r Completed

2012-04-03 17:50:37 exim 4.77 daemon started: pid=32353, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4)

2012-04-03 17:51:47 1SFCZn-0008Pz-Qm <= [email protected] H=mail-iy0-f176.google.com [209.85.210.176] P=esmtps X=TLSv1:RC4-SHA:128 S=2394 id=CALeGGkiQiWqO+tVR8nEtTTooi8sKkVUK-2_z0t=+Hq8ewrFFsw@mail.gmail.com T="viagra" from <[email protected]> for [email protected]

2012-04-03 17:51:48 1SFCZn-0008Pz-Qm => prueba <[email protected]> F=<[email protected]> R=virtual_user T=virtual_localdelivery S=2512

2012-04-03 17:51:48 1SFCZn-0008Pz-Qm Completed

2012-04-03 18:01:15 exim 4.77 daemon started: pid=32464, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
Click to expand...

ps aux | grep spamd
root 26246 0.0 1.1 37368 34996 ?? Ss 8:53AM 0:09.47 /usr/bin/spamd -d -c -m 15 (perl)
root 26247 0.0 1.1 37368 35000 ?? I 8:53AM 0:00.08 spamd child (perl)
root 26248 0.0 1.1 37368 35000 ?? I 8:53AM 0:00.09 spamd child (perl)
root 32600 0.0 0.0 3368 1216 p1 S+ 6:07PM 0:00.01 grep spamd
[root@perseus /home/admin/.spamassassin]#
Click to expand...

Just In case I've update Exim follow this steps http://help.directadmin.com/item.php?id=51
And this....http://help.directadmin.com/item.php?id=117 But the problem persists.

Can somebody give me your help

Thank You very Much
 
Hello,

Make sure SpamAssassin is enabled for da-domain.com (check it on user level).
 
Hello.
The Option of SpamAssassin is enabled by default for all users.
Even the user was migrated from a server is running spamd normally.



Thank You.
 
When I run.


# /usr/bin/spamd
Apr 4 11:24:24.612 [38928] warn: server socket setup failed, retry 1: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:25.622 [38928] warn: server socket setup failed, retry 2: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:26.632 [38928] warn: server socket setup failed, retry 3: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:27.642 [38928] warn: server socket setup failed, retry 4: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:28.652 [38928] warn: server socket setup failed, retry 5: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:29.662 [38928] warn: server socket setup failed, retry 6: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:30.672 [38928] warn: server socket setup failed, retry 7: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Apr 4 11:24:31.682 [38928] warn: server socket setup failed, retry 8: spamd: could not create INET socket on 127.0.0.1:783: Address already in use
Click to expand...

:confused:
 
spamd is a daemon, you should use

Code: 
service exim restart

to restart spamd, as well as stop and start
 
Hello
I did this procedure.

But I can find other and change the Socket Spamd use to connect with 127.0.0.1


[root@perseus /mega/home/eduardo]# /usr/bin/spamd -d -c -m 15 -p 10025
[root@perseus /mega/home/eduardo]#
Click to expand...

And now the mails are checked by Spamd.

2012-04-04 12:14:05 1SFTmX-000AGL-LV <= [email protected] H=mail-yw0-f48.google.com [209.85.213.48] P=esmtps X=TLSv1:RC4-SHA:128 S=4255 id=CALeGGkg4Gj5iTn9eubbhJfqB0zeMSvOM2Pc+FN+xGrm-7Qi1AA@mail.gmail.com T="Re: viagra1" from <[email protected]> for [email protected]

2012-04-04 12:14:07 1SFTmX-000AGO-Q5 <= [email protected] U=mail P=spam-scanned S=4719 id=CALeGGkg4Gj5iTn9eubbhJfqB0zeMSvOM2Pc+FN+xGrm-7Qi1AA@mail.gmail.com T="Re: viagra1" from <[email protected]> for [email protected]

2012-04-04 12:14:07 1SFTmX-000AGO-Q5 => prueba <[email protected]> F=<[email protected]> R=virtual_user T=virtual_localdelivery S=4837

2012-04-04 12:14:07 1SFTmX-000AGO-Q5 Completed

2012-04-04 12:14:07 1SFTmX-000AGL-LV => prueba <[email protected]> F=<[email protected]> R=spamcheck_director T=spamcheck S=4588

2012-04-04 12:14:07 1SFTmX-000AGL-LV Completed
Click to expand...


But I can't find what process is using 783 Spamd's default port.
How can I set manually this?

Best Regards
 
OK, run this


Code: 
# grep spamd /etc/init.d/exim

and if you see something like this

Code: 
        #if [ -e /usr/bin/spamd ]; then /usr/bin/spamd -d -c -m 5 1>/dev/null 2>/dev/null; fi
        #if [ -e /usr/bin/spamd ]; then killall -9 spamd 1>/dev/null 2>/dev/null; fi

change the lines in /etc/init.d/exim to

Code: 
        if [ -e /usr/bin/spamd ]; then /usr/bin/spamd -d -c -m 5 1>/dev/null 2>/dev/null; fi
        if [ -e /usr/bin/spamd ]; then killall -9 spamd 1>/dev/null 2>/dev/null; fi

and restart exim.

To find, which process is bind to a port 783, run this
Code: 
lsof -i:783

Install lsof if you have not it.
 
Hello.
I have this



# grep spamd /usr/local/etc/rc.d/exim
if [ -e /usr/bin/spamd ]; then /usr/bin/spamd -d -c -m 5 1>/dev/null 2>/dev/null; fi
killall -9 spamd 1>/dev/null 2>/dev/null
Click to expand...
I kill the process attached to 783 port (was 3) and 10025 too, just in case.

Well, after that I restarted exim

And now the mails are passing normally :cool:



2012-04-04 13:35:33 1SFV3I-0000qv-0F DKIM: d=gmail.com s=20120113 c=relaxed/relaxed a=rsa-sha256 [verification succeeded]

2012-04-04 13:35:33 1SFV3I-0000qv-0F <= [email protected] H=mail-wi0-f170.google.com [209.85.212.170] P=esmtps X=TLSv1:RC4-SHA:128 S=2480 id=CAFfG9cJ3BxjO2wvy7akH4b0+pWJovpR7NOXjtEPpbAqrt62YQg@mail.gmail.com T="hola como estas" from <[email protected]> for prueba@diradmin_domain.com

2012-04-04 13:35:35 1SFV3N-0000qy-Bw <= [email protected] U=mail P=spam-scanned S=2955 id=CAFfG9cJ3BxjO2wvy7akH4b0+pWJovpR7NOXjtEPpbAqrt62YQg@mail.gmail.com T="hola como estas" from <[email protected]> for prueba@diradmin_domain.com

2012-04-04 13:35:35 1SFV3N-0000qy-Bw => prueba <prueba@diradmin_domain.com> F=<[email protected]> R=virtual_user T=virtual_localdelivery S=3070

2012-04-04 13:35:35 1SFV3N-0000qy-Bw Completed

2012-04-04 13:35:35 1SFV3I-0000qv-0F => prueba <prueba@diradmin_domain.com> F=<[email protected]> R=spamcheck_director T=spamcheck S=2824

2012-04-04 13:35:35 1SFV3I-0000qv-0F Completed


2012-04-04 13:35:49 1SFV3c-0000r5-PZ <= sender2@sender_dom2.com H=mail-iy0-f176.google.com [209.85.210.176] P=esmtps X=TLSv1:RC4-SHA:128 S=93303 id=CALeGGkg3A+9si61cSqsCNv-Hg--bDKSnSFCKe5mbYO-6b1u-8g@mail.gmail.com T="HOLA EDUARD" from <sender2@sender_dom2.com> for prueba@diradmin_domain.com

2012-04-04 13:35:51 1SFV3d-0000r8-BM <= sender2@sender_dom2.com U=mail P=spam-scanned S=93741 id=CALeGGkg3A+9si61cSqsCNv-Hg--bDKSnSFCKe5mbYO-6b1u-8g@mail.gmail.com T="HOLA EDUARD" from <sender2@sender_dom2.com> for prueba@diradmin_domain.com

2012-04-04 13:35:51 1SFV3d-0000r8-BM => prueba <prueba@diradmin_domain.com> F=<sender2@sender_dom2.com> R=virtual_user T=virtual_localdelivery S=93859

2012-04-04 13:35:51 1SFV3d-0000r8-BM Completed

2012-04-04 13:35:51 1SFV3c-0000r5-PZ => prueba <prueba@diradmin_domain.com> F=<sender2@sender_dom2.com> R=spamcheck_director T=spamcheck S=93610

2012-04-04 13:35:51 1SFV3c-0000r5-PZ Completed
Click to expand...

I willl continue testing and testing if I found something weird I will post.


THANK YOU VERY MUCH
TO ALL

Best Regards

Lima - Peru
 
You must log in or register to reply here.
Back
Top