store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed May 22, 2013 11:20 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 
Author Message
 Post subject: Questions in my fight vs spam
Unread postPosted: Wed May 03, 2006 5:14 am 
Offline
New Forum User
New Forum User

Joined: Wed May 03, 2006 4:41 am
Posts: 1
Hi, I have installed spamassassin 3.0.4 and to fight against spam I have installed DCC, Razor and Pyzor, but I don't know if this systems are working perfectly.

Next steps are corrects?

Installation Razor:
cd /tmp/spam
wget http://unc.dl.sourceforge.net/sourc...nts-2.81.tar.gz
bzip2 -d razor-agents-2.81.tar.bz2
tar xvzf razor-agents-2.81.tar
cd razor-agents-2.81
perl Makefile.PL PREFIX=/tmp/spam && make && make install

razor-client
razor-admin -home=/etc/mail/spamassassin/.razor -register
razor-admin -home=/etc/mail/spamassassin/.razor -create
razor-admin -home=/etc/mail/spamassassin/.razor -discover

copy razor-agent.conf in /etc/mail/spamassassin/razor/razor-agent.conf
add to /etc/mail/spamassassin/.razor/razor-agent.conf: razorhome
= /etc/mail/spamassassin/.razor/

Installation Pyzor:

python setup.py build
python setup.py install

Rights:

chmod -R a+rX /usr/share/doc/pyzor \
/usr/lib/python2.3/site-packages/pyzor \
/usr/bin/pyzor /usr/bin/pyzord

Installation DCC:
cd /tmp/spam
wget http://www.dcc-servers.net/dcc/source/dcc.tar.Z
tar -xvf dcc.tar.tar
cd dcc-1.3.31
./configure
make
make install

LOCAL.CF File

required_hits 5
report_safe 0
rewrite_header subject *****SPAM*****
required_score 6
blacklist_from *@andreaspadoni.it

#razor
use_razor2 1
razor_timeout 10
razor_config /etc/mail/spamassassin/.razor/razor-agent.conf

#dcc
use_dcc 1

dcc_path /usr/local/bin/dccproc

dcc_add_header 1

dcc_dccifd_path /usr/sbin/dccifd

#pyzor
use_pyzor 1
pyzor_path /usr/bin/pyzor
pyzor_add_header 1
pyzor_options --homedir /etc/mail/spamassassin

SPAMASSASSIN -D --LINT


[root@comeralia ~]# spamassassin -D --lint
debug: SpamAssassin version 3.0.4
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/kerberos/sbin', keeping.
debug: PATH included '/usr/kerberos/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/X11R6/bin', keeping.
debug: PATH included '/root/bin', which doesn't exist, dropping.
debug: Final PATH set to: /usr/kerberos/sbin:/usr/kerberos/bin:/sbin:/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
debug: diag: module installed: DBI, version 1.40
debug: diag: module installed: DB_File, version 1.809
debug: diag: module installed: Digest::SHA1, version 2.07
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.01
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module installed: Net::LDAP, version 0.31
debug: diag: module installed: Razor2::Client::Agent, version 2.81
debug: diag: module installed: Storable, version 2.13
debug: diag: module installed: URI, version 1.30
debug: ignore: using a test message to lint rules
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/70_sare_adult.cf
debug: config: read file /etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
debug: config: read file /etc/mail/spamassassin/70_sare_header.cf
debug: config: read file /etc/mail/spamassassin/70_sare_html.cf
debug: config: read file /etc/mail/spamassassin/70_sare_oem.cf
debug: config: read file /etc/mail/spamassassin/70_sare_random.cf
debug: config: read file /etc/mail/spamassassin/70_sare_specific.cf
debug: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
debug: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
debug: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
debug: config: read file /etc/mail/spamassassin/local.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9b6bd58)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668) implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9b6bd58) implements 'parse_config'
config: SpamAssassin failed to parse line, skipping: dcc_add_header 1
config: SpamAssassin failed to parse line, skipping: pyzor_add_header 1
warning: description for EXCUSE_ES_03 is over 50 chars
debug: using "/root/.spamassassin" for user state dir
debug: bayes: 27270 tie-ing to DB file R/O /root/.spamassassin/bayes_toks
debug: bayes: 27270 tie-ing to DB file R/O /root/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: using "/root/.spamassassin" for user state dir
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 27270 untie-ing
debug: bayes: 27270 untie-ing db_toks
debug: bayes: 27270 untie-ing db_seen
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: bayes: 27270 tie-ing to DB file R/O /root/.spamassassin/bayes_toks
debug: bayes: 27270 tie-ing to DB file R/O /root/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 27270 untie-ing
debug: bayes: 27270 untie-ing db_toks
debug: bayes: 27270 untie-ing db_seen
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668) implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) comcast.net...
debug: looking up NS for 'comcast.net'
debug: NS lookup of comcast.net succeeded => Dns available (set dns_available to hardcode)
debug: is DNS available? 1
debug: decoding: no encoding detected
debug: URIDNSBL: domains to query:
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9b6bd58))
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9b6bd58))
debug: all '*To' addrs:
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x9bc1db8))
debug: running body-text per-line regexp tests; score so far=-2.623
debug: running uri tests; score so far=-2.623
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668))
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: read_file: 16 items read from /etc/mail/spamassassin/.razor/razor-agent.conf
Razor-Log: Found razorhome: /etc/mail/spamassassin/.razor/
may 03 11:11:30.377533 check[27270]: [ 2] [bootup] Logging initiated LogDebugLevel=9 to stdout
may 03 11:11:30.377972 check[27270]: [ 5] computed razorhome=/etc/mail/spamassassin/.razor/, conf=/etc/mail/spamassassin/.razor/razor-agent.conf, ident=/etc/mail/spamassassin/.razor//identity-ruzemiBIxJ
may 03 11:11:30.378167 check[27270]: [ 8] Client supported_engines: 4 8
may 03 11:11:30.378490 check[27270]: [ 8] prep_mail done: mail 1 headers=93, mime0=1376
may 03 11:11:30.378801 check[27270]: [ 5] read_file: 1 items read from /etc/mail/spamassassin/.razor//servers.discovery.lst
may 03 11:11:30.379066 check[27270]: [ 5] read_file: 2 items read from /etc/mail/spamassassin/.razor//servers.nomination.lst
may 03 11:11:30.379317 check[27270]: [ 5] read_file: 1 items read from /etc/mail/spamassassin/.razor//servers.catalogue.lst
may 03 11:11:30.379620 check[27270]: [ 9] Assigning defaults to folly.cloudmark.com
may 03 11:11:30.379756 check[27270]: [ 9] Assigning defaults to joy.cloudmark.com
may 03 11:11:30.379879 check[27270]: [ 9] Assigning defaults to shock.cloudmark.com
may 03 11:11:30.380600 check[27270]: [ 5] read_file: 19 items read from /etc/mail/spamassassin/.razor//server.shock.cloudmark.com.conf
may 03 11:11:30.381098 check[27270]: [ 5] read_file: 19 items read from /etc/mail/spamassassin/.razor//server.shock.cloudmark.com.conf
may 03 11:11:30.381571 check[27270]: [ 5] read_file: 17 items read from /etc/mail/spamassassin/.razor//server.joy.cloudmark.com.conf
may 03 11:11:30.382006 check[27270]: [ 5] read_file: 17 items read from /etc/mail/spamassassin/.razor//server.joy.cloudmark.com.conf
may 03 11:11:30.382205 check[27270]: [ 5] 105768 seconds before closest server discovery
may 03 11:11:30.382371 check[27270]: [ 6] shock.cloudmark.com is a Catalogue Server srl 5094; computed min_cf=21, Server se: C8
may 03 11:11:30.382532 check[27270]: [ 8] Computed supported_engines: 4 8
may 03 11:11:30.382650 check[27270]: [ 8] Using next closest server shock.cloudmark.com:2703, cached info srl 5094
may 03 11:11:30.382753 check[27270]: [ 8] mail 1 has no subject
may 03 11:11:30.383074 check[27270]: [ 6] preproc: mail 1.0 went from 1376 bytes to 1339
may 03 11:11:30.383212 check[27270]: [ 6] computing sigs for mail 1.0, len 1339
may 03 11:11:30.384923 check[27270]: [ 6] Engine (8) didn't produce a signature for mail 1.0
may 03 11:11:30.385159 check[27270]: [ 6] skipping whitelist file (empty?): /etc/mail/spamassassin/.razor//razor-whitelist
may 03 11:11:30.385277 check[27270]: [ 5] Connecting to shock.cloudmark.com ...
may 03 11:11:30.769150 check[27270]: [ 8] Connection established
may 03 11:11:30.769485 check[27270]: [ 4] shock.cloudmark.com >> 36 server greeting: sn=C&srl=5094&a=l&a=cg&ep4=7542-10
may 03 11:11:30.770149 check[27270]: [ 4] shock.cloudmark.com << 25
may 03 11:11:30.770262 check[27270]: [ 6] cn=razor-agents&cv=2.81
may 03 11:11:30.770513 check[27270]: [ 6] shock.cloudmark.com is a Catalogue Server srl 5094; computed min_cf=21, Server se: C8
may 03 11:11:30.770727 check[27270]: [ 8] Computed supported_engines: 4 8
may 03 11:11:30.770891 check[27270]: [ 8] mail 1.0 e4 sig: xFaZIZUVHk90OQfARnenjx5BZTMA
may 03 11:11:30.771017 check[27270]: [ 5] mail 1.0 e8 got no sig
may 03 11:11:30.771141 check[27270]: [ 8] preparing 1 queries
may 03 11:11:30.771305 check[27270]: [ 8] sending 1 batches
may 03 11:11:30.771445 check[27270]: [ 4] shock.cloudmark.com << 52
may 03 11:11:30.771512 check[27270]: [ 6] a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMA
may 03 11:11:31.449127 check[27270]: [ 4] shock.cloudmark.com >> 5
may 03 11:11:31.449256 check[27270]: [ 6] response to sent.2
p=0
may 03 11:11:31.449594 check[27270]: [ 6] mail 1.0 e=4 sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.
may 03 11:11:31.449712 check[27270]: [ 7] method 4: mail 1.0: no-contention part, spam=0
may 03 11:11:31.449782 check[27270]: [ 7] method 4: mail 1: all non-contention parts not spam, mail not spam
may 03 11:11:31.449847 check[27270]: [ 3] mail 1 is not known spam.
may 03 11:11:31.449949 check[27270]: [ 5] disconnecting from server shock.cloudmark.com
may 03 11:11:31.450087 check[27270]: [ 4] shock.cloudmark.com << 5
may 03 11:11:31.450154 check[27270]: [ 6] a=q
debug: Using results from Razor v2.81
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-2.623
debug: running full-text regexp tests; score so far=-2.623
debug: Razor2 is available
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: setuid: helper proc 27287: ruid=0 euid=0
debug: Pyzor: got response: 66.250.40.33:24441 (200, 'OK') 0 0
debug: leaving helper-app run mode
debug: DCCifd is not available: no r/w dccifd socket found.
debug: DCC is available: /usr/local/bin/dccproc
debug: entering helper-app run mode
debug: setuid: helper proc 27298: ruid=0 euid=0
debug: DCC: got response: X-DCC-EATSERVER-Metrics: comeralia.com 1166; Body=38210 Fuz1=66496 Fuz2=849103
debug: leaving helper-app run mode
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9b7f668) implements 'check_post_dnsbl'
debug: running meta tests; score so far=-2.623
debug: running header regexp tests; score so far=-1.053
debug: running body-text per-line regexp tests; score so far=-1.053
debug: running uri tests; score so far=-1.053
debug: running raw-body-text per-line regexp tests; score so far=-1.053
debug: running full-text regexp tests; score so far=-1.053
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-1.053
debug: running header regexp tests; score so far=-1.053
debug: using "/root/.spamassassin" for user state dir
debug: lock: 27270 created /root/.spamassassin/auto-whitelist.lock.comeralia.com.27270
debug: lock: 27270 trying to get lock on /root/.spamassassin/auto-whitelist with 0 retries
debug: lock: 27270 link to /root/.spamassassin/auto-whitelist.lock: link ok
debug: Tie-ing to DB file R/W in /root/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): ignore@compiling.spamassassin.taint.org|ip=none scores 0/0
debug: AWL active, pre-score: -1.053, autolearn score: -1.053, mean: undef, IP: undef
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 27270 unlink /root/.spamassassin/auto-whitelist.lock
debug: Post AWL score: -1.053
debug: running body-text per-line regexp tests; score so far=-1.053
debug: running uri tests; score so far=-1.053
debug: running raw-body-text per-line regexp tests; score so far=-1.053
debug: running full-text regexp tests; score so far=-1.053
debug: is spam? score=-1.053 required=6
debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__UNUSABLE_MSGID
lint: 3 issues detected. please rerun with debug enabled for more information.
[root@comeralia ~]#



Could you help me? I'm starting with spam fight and I need help

Thank you very much


Top
 Profile  
 
 Post subject:
Unread postPosted: Wed May 03, 2006 3:11 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7425
Location: earth
You could also use the rpms :P

yum install dcc razor-agents pyzor


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group