On Wed, 2006-06-21 at 19:07 -0700, Ross Boylan wrote:> I switched it to spam = Debian-exim, and it seems to run without > complaint.I was previously using sa-exim, which ran under Debian-exim. I''ve removed sa-exim and switched to exim4-daemon-heavy 4.62-1. Sorry I forgot that the first time.
The commented out material in 40_exim4_config_check_data includes
spam = nobody
When I tried this, I got
Jun 21 18:31:59 iron spamd[598]: spamd: connection from localhost
[127.0.0.1] at port 52711
Jun 21 18:31:59 iron spamd[598]: spamd: setuid to nobody succeeded
Jun 21 18:31:59 iron spamd[598]: spamd: creating
default_prefs: /nonexistent/.spamassassin/user_prefs
Jun 21 18:32:00 iron spamd[598]: mkdir /var/spool/exim4/.spamassassin:
Permission denied at /usr/share/perl5/Mail/SpamAssassin.pm line 1486
Jun 21 18:32:00 iron spamd[598]: config: cannot write
to /nonexistent/.spamassassin/user_prefs: No such file or directory
Jun 21 18:32:00 iron spamd[598]: spamd: failed to create readable
default_prefs: /nonexistent/.spamassassin/user_prefs
Jun 21 18:32:00 iron spamd[598]: spamd: checking message
<20060622012120.11944.qmail@web30611.mail.mud.yahoo.com> for
nobody:65534
Jun 21 18:32:08 iron spamd[598]: mkdir /nonexistent: Permission denied
at /usr/share/perl5/Mail/SpamAssassin.pm line 1486
Jun 21 18:32:08 iron spamd[598]: locker: safe_lock: cannot create
lockfile /nonexistent/.spamassassin/auto-whitelist.mutex: No such file
or directory
Jun 21 18:32:09 iron spamd[598]: auto-whitelist: open of auto-whitelist
file failed: locker: safe_lock: cannot create
lockfile /nonexistent/.spamassassin/auto-whitelist.mutex: No such file
or directory
Jun 21 18:32:09 iron spamd[598]: spamd: clean message (0.0/5.0) for
nobody:65534 in 9.3 seconds, 3071 bytes.
Jun 21 18:32:09 iron spamd[598]: spamd: result: . 0 -
scantime=9.3,size=3071,user=nobody,uid=65534,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=52711,mid=<20060622012120.11944.qmail@web30611.mail.mud.yahoo.com>,autolearn=disabled
Is this supposed to work? The exim spec says "If you do not want to
scan for a particular user, but rather use the SpamAssassin system-wide
default profile, you can scan for an unkown user, or simply use
"nobody." Is this getting messed up because Debian actually has a
user
nobody?
I switched it to spam = Debian-exim, and it seems to run without
complaint. However, it isn''t adding any headers. I have
CHECK_DATA_LOCAL_ACL_FILE = /etc/exim4/local_data_acl
in conf.d/main/00_local
and that file has
# message only writes message of all conditions pass
# not what I want
warn
condition = ${if < {$message_size}{50k}}
spam = Debian-exim:true
add_header = X-Spam_score: $spam_score\n\
X-Spam_score_int: $spam_score_int\n\
X-Spam_bar: $spam_bar\n\
X-Spam_report: $spam_report
condition = ${if > {$spam_score_int}{50}
add_header = X-Spam-Status: Yes
It might be relevant that the message arrived with SA headers from a
host listed on SA''s trusted_networks.
--
Ross Boylan wk: (415) 514-8146
185 Berry St #5700 ross@biostat.ucsf.edu
Dept of Epidemiology and Biostatistics fax: (415) 514-8150
University of California, San Francisco
San Francisco, CA 94107-1739 hm: (415) 550-1062
Ross Boylan
2006-Jun-22 17:57 UTC
[Pkg-exim4-users] Re: setting up spamassassin [partly solved]
On Wed, 2006-06-21 at 19:07 -0700, Ross Boylan wrote:> warn > condition = ${if < {$message_size}{50k}} > spam = Debian-exim:true > add_header = X-Spam_score: $spam_score\n\ > X-Spam_score_int: $spam_score_int\n\ > X-Spam_bar: $spam_bar\n\ > X-Spam_report: $spam_report > condition = ${if > {$spam_score_int}{50} > add_header = X-Spam-Status: Yes >The condition needs another } at the end. Duh. I''m not sure why that wasn''t flagged before; maybe somehow one of my reload/restarts didn''t take. I still wondering about the example code that says spam = nobody. -- Ross Boylan wk: (415) 514-8146 185 Berry St #5700 ross@biostat.ucsf.edu Dept of Epidemiology and Biostatistics fax: (415) 514-8150 University of California, San Francisco San Francisco, CA 94107-1739 hm: (415) 550-1062
On Wed, Jun 21, 2006 at 07:07:05PM -0700, Ross Boylan wrote:> Is this supposed to work?No, a wrong example. I have fixed the file in svn, corrected version in http://svn.debian.org/wsvn/pkg-exim4/exim/trunk/debian/debconf/conf.d/acl/40_exim4-config_check_data?op=file&rev=0&sc=0> I switched it to spam = Debian-exim, and it seems to run without > complaint. However, it isn''t adding any headers.Use Debian-exim:true. Please note that this makes spamd run with Debian-exim privileges which might expose private data in case of a spamassassin exploit. Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don''t trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835