• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Gamera not scanning for spam

E

egate

Guest
Hi,

I've installed ART's Gamera anti spam/virus mail server. It is virus scanning and forwarding mail fine but it's not scanning for spam. The server is CentOS3. Can anyone give me any pointers?

The maillog shows messages like this:
Aug 26 11:10:20 granite qmail-scanner[3578]: Clear:RC:0(xxx.36.67.254): 0.336129 6196 [email protected] [email protected] Request_From_Stock_Enquiry_System_[CM402021] <[email protected]> 1125051020.3581-0.granite.xxxxx.net:497 1125051020.3581-1.granite.xxxxx.net:3900 orig-granite.xxxxxx.net11250510197223578:6196

The relevent part of the received email looks like this.
Received: (qmail 21444 invoked by uid 106); 26 Aug 2005 08:36:43 -0000
Received: from xx.251.163.70 by granite.xxxxxxx.net (envelope-from <[email protected]>, uid 103) with qmail-scanner-1.25st
(clamdscan: 0.86.2/1041. perlscan: 1.25st.
Clear:RC:0(xx.251.163.70):.
Processed in 0.568635 secs); 26 Aug 2005 08:36:43 -0000
Received: from lns-vlq-38-lyo-82-251-163-70.adsl.xxxxxxx.net (HELO jaxxxxorm.com) (xxx.251.163.70)
by granite.xxxxxx.net with SMTP; 26 Aug 2005 08:36:42 -0000

subject: V and mny other CIIS VAGRRA


A test of spamassassin:
/usr/bin/spamassassin -t </usr/share/doc/spamassassin-3.0.3/sample-spam.txt
Net::DNS version is 0.31, but need 0.34dnsavailable-1 at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 1230.
Subject: ****SPAM(998.8)**** Test spam mail (GTUBE)
Message-ID: <[email protected]>
Date: Wed, 23 Jul 2003 23:30:00 +0200
From: Sender <[email protected]>
To: Recipient <[email protected]>
Precedence: junk
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Prev-Subject: Test spam mail (GTUBE)
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on granite.revsit.net
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=998.8 required=5.0 tests=ALL_TRUSTED,GTUBE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK autolearn=unavailable
version=3.0.3
X-Spam-Report:
* -2.8 ALL_TRUSTED Did not pass through any untrusted hosts
* 1000 GTUBE BODY: Generic Test for Unsolicited Bulk Email
* 1.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
* [cf: 100]
* 0.1 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

This is the GTUBE, the
Generic
Test for
Unsolicited
Bulk
Email

bla bla bla

Content analysis details: (998.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-2.8 ALL_TRUSTED Did not pass through any untrusted hosts
1000 GTUBE BODY: Generic Test for Unsolicited Bulk Email
1.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
0.1 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

I can manually start spamassassin, but it's not set to start on startup: (nothe the
Aug 26 14:33:13 granite spamd[1753]: spamd starting
Aug 26 14:33:13 granite spamd[1755]: Net::DNS version is 0.31, but need 0.34dnsavailable-1 at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 1230.
Aug 26 14:33:17 granite spamd[1755]: server started on port 783/tcp (running version 3.0.3)
Aug 26 14:33:17 granite spamd[1755]: server successfully spawned child process, pid 1760
Aug 26 14:33:17 granite spamd[1755]: server successfully spawned child process, pid 1761
Aug 26 14:33:17 granite spamd[1755]: server successfully spawned child process, pid 1762
Aug 26 14:33:17 granite spamd[1755]: server successfully spawned child process, pid 1763
Aug 26 14:33:17 granite spamd[1755]: server successfully spawned child process, pid 1764

I went to try to update the Net::DNS module and got:
perl -MCPAN -e shell;
Can't locate CPAN.pm in @INC (@INC contains: /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 .).
BEGIN failed--compilation aborted.

Many Thanks for any help,

Jonny
 
First off, stay far away from CPAN on this, you'll cause all sorts of problems internally in spamassassin.

Next, make sure spamd is running, and then run qmail-scanner-reconfigure, this should detect spamassassin and add the SA scanning code to the qmail-scanner-queue.pl file.
 
This solved the same problem for me too; thanks ART!

The default install doesn't set spamd to run on startup (on my fresh RH9 config), so that may be causing this problem for some people.

Now to support rejecting mail to non-existant addresses... I'll let you know how it goes.
 
Back
Top