• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Spamassassin is not working?

P

piotrek

Guest
Dear Forum members,

I have new box with FC3, PSA 7.5.4 ... all upgrades from ART but i think spamassassin is not working or not working well.

When i do: ps -aux |grep spam
i get:

root 19052 0.1 3.2 27332 25268 ? Ss 21:45 0:01 /usr/bin/spamd --username=popuser --daemonize --helper-home-dir=/var/qmail --max-children 5 --create-prefs --nouser-config --virtual-config-dir=/var/qmail/mailnames/%d/%l --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
root 19053 0.0 2.9 25208 22868 ? Ss 21:45 0:01 /usr/bin/spamd --username=popuser --daemonize --helper-home-dir=/var/qmail --max-children 5 --create-prefs --nouser-config --virtual-config-dir=/var/qmail/mailnames/%d/%l --pidfile=/var/run/spamd/spamd_light.pid --socketpath=/tmp/spamd_light.sock --siteconfigpath=/dev/null
popuser 19065 0.0 3.3 27332 25340 ? S 21:45 0:00 spamd child
popuser 19066 0.0 3.2 27332 25268 ? S 21:45 0:00 spamd child
popuser 19067 0.0 2.9 25208 22872 ? S 21:45 0:00 spamd child
popuser 19068 0.0 2.9 25208 22872 ? S 21:45 0:00 spamd child

but i receive tons of spam without *** SPAM *** mark.

Mail headers looks like this:

Received: (qmail 12636 invoked by uid 2520); 27 Nov 2005 16:27:03 +0100 Received: from IP_ADRESS by HOSTNAME (envelope-from <email_adress>, uid 2020) with qmail-scanner-1.25st
(perlscan: 1.25st. Clear:RC:1(IP_ADRESS):

Headers of emails from my previous (old) server was:

Received: from IP_ADRESS by HOSTNAME (envelope-from <EMAIL_ADRESS>, uid 2020) with qmail-scanner-1.25st
(clamdscan: 0.83/825. spamassassin: 2.63. perlscan: 1.25st.
Clear:RC:0(IP_ADRESS):. Processed in 1.067102 secs);

So, can you tell me what is going on? :)
I did before (from: http://www.grafxsoftware.com/util/PLESK-HOWTO.txt):

shell: yum remove drweb-qmail drweb
shell: yum install qmail-scanner clamav clamav-devel

After install is done, use

shell: /usr/bin/qmail-scanner-reconfigure

Now allshould work fine, you can check to send to you a test virus from http://www.webmail.us/testvirus
In meantime check log files to see if all work fine and no errors are there.
tail -f /var/spool/qmailscan/qmail-queue.log
tail -f /usr/local/psa/var/log/maillog

and earlier i did of course:

yum update


Even if ClamAV is not listed in mail header it is working, because i see it in action while: tail -f /var/spool/qmailscan/qmail-queue.log

Can you tell me somebody, what is going on?
Where can i find qmail-scanner config?
Can you tell me what should I check or test?

Peter
 
Back
Top