Mailing List Archive: SpamAssassin, AmaVis, and Sendmail assistance needed

SpamAssassin, AmaVis, and Sendmail assistance needed

Feb 14, 2004, 9:09 AM

Post #1 of 3 (804 views)

Hello all guru's

I am a hard time trying to get amavis-new implemented with SpamAssassin,
(great application). I have been getting some virus through my email that
my user have been complaining about, I know that I could go out and purchase
a corporate Tool and make sure that every laptop and desktop has the latest
and greatest version and virus update file. I would like to implement
amavis with Sendmail MTA and Spamassassin. I am able to install and configure
clamd, amavis, SpamAssassin, and sendmail with no problems separate of each
other, with the exception of SpamAssassin and sendmail. SpamAssassin is
integrated well with sendmail, but when I try to enter the following entry
in the sendmail.cf file:

#Mlocal, P=/usr/sbin/amavis, F=lsDFMAw5:/|@qPmn9S,
# S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
# T=DNS/RFC822/X-Unix, U=amavis:amavis,
# A=amavis $f $u -- /usr/bin/mail.local -d $u

or

#Mlocal, P=/usr/sbin/amavis, F=lsDFMAw5:/|@qrn9, S=10/30, R=20/40,
# T=DNS/RFC822/X-Unix,
# A=amavis $f $u -- /bin/mail.local -d $u

I then start having issues with sendmail not able to work. The issues that
I start having is when I run a test with an email that has a test string
for a virus all sendmail does is run in a loop and fills up my mqueue
directory, also at times when it does not loop with the second entry from
above the /usr/sbin/amavis fails with the following error,
"failed EX_TEMPFAIL".

I have attached the output from amavis debug-sa and if needed I can send
along the amavis.conf file, I did not want to send it due to the size of
the email with the configuration file.

I am needing some assistance on setting up sendmail, I do not use postfix nor
procmail configuration files. I would like to integrate this directly into
the sendmail configuration file if I could. Any and all assistance would
be greatly appreciated.

Thanks very much for the Assistance in Advance

Spam Administrator/Email Administrator(Bryan)

#### Output from amavisd debug-sa

# amavisd debug-sa
Feb 14 09:05:07 elmo amavisd[11971]: starting. amavisd at elmo amavisd-new-20030616-p7, Unicode aware, LANG=en_US.UTF-8
Feb 14 09:05:08 elmo amavisd[11971]: Perl version 5.008002
Feb 14 09:05:08 elmo amavisd[11971]: Module Amavis::Conf 1.15
Feb 14 09:05:08 elmo amavisd[11971]: Module Archive::Tar 1.08
Feb 14 09:05:08 elmo amavisd[11971]: Module Archive::Zip 1.09
Feb 14 09:05:08 elmo amavisd[11971]: Module Compress::Zlib 1.33
Feb 14 09:05:08 elmo amavisd[11971]: Module Convert::TNEF 0.17
Feb 14 09:05:08 elmo amavisd[11971]: Module Convert::UUlib 1.0
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Entity 5.404
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Parser 5.406
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Tools 5.411
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::Header 1.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::Internet 1.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::SpamAssassin 2.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::Cmd 2.24
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::DNS 0.42
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::SMTP 2.26
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::Server 0.86
Feb 14 09:05:08 elmo amavisd[11971]: Module Time::HiRes 1.52
Feb 14 09:05:08 elmo amavisd[11971]: Module Unix::Syslog 0.99
Feb 14 09:05:08 elmo amavisd[11971]: Found myself: /usr/sbin/amavisd -c /etc/amavisd.conf
Feb 14 09:05:08 elmo amavisd[11971]: Lookup::SQL code NOT loaded
Feb 14 09:05:08 elmo amavisd[11971]: Lookup::LDAP code NOT loaded
Feb 14 09:05:08 elmo amavisd[11971]: AMCL-in protocol code loaded
Feb 14 09:05:08 elmo amavisd[11971]: SMTP-in protocol code loaded
Feb 14 09:05:08 elmo amavisd[11971]: ANTI-VIRUS code loaded
Feb 14 09:05:08 elmo amavisd[11971]: ANTI-SPAM code loaded
Feb 14 09:05:08 elmo amavisd[11971]: Net::Server: 2004/02/14-09:05:08 Amavis (type Net::Server::PreForkSimple) starting! pid(11971)
Feb 14 09:05:09 elmo amavisd[11971]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Setting gid to "802 802"
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Setting uid to "804"
Feb 14 09:05:10 elmo amavisd[11971]: Found $file at /usr/bin/file
Feb 14 09:05:10 elmo amavisd[11971]: Found $arc at /usr/bin/arc
Feb 14 09:05:10 elmo amavisd[11971]: Found $gzip at /usr/bin/gzip
Feb 14 09:05:11 elmo amavisd[11971]: Found $bzip2 at /usr/bin/bzip2
Feb 14 09:05:11 elmo amavisd[11971]: No $lzop, not using it
Feb 14 09:05:11 elmo amavisd[11971]: Found $lha at /usr/bin/lha
Feb 14 09:05:11 elmo amavisd[11971]: Found $unarj at /usr/bin/unarj
Feb 14 09:05:11 elmo amavisd[11971]: Found $uncompress at /usr/bin/uncompress
Feb 14 09:05:11 elmo amavisd[11971]: No $unfreeze, not using it
Feb 14 09:05:11 elmo amavisd[11971]: Found $unrar at /usr/bin/unrar
Feb 14 09:05:11 elmo amavisd[11971]: Found $zoo at /usr/bin/zoo
Feb 14 09:05:11 elmo amavisd[11971]: Found $cpio at /bin/cpio
Feb 14 09:05:11 elmo amavisd[11971]: Using internal av scanner code for (primary) Clam Antivirus-clamd
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab AVP - aveclient
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab AntiViral Toolkit Pro (AVP)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab AVPDaemonClient
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: H+BEDV AntiVir or CentralCommand Vexira Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Command AntiVirus for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Symantec CarrierScan via Symantec CommandLineScanner
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Symantec AntiVirus Scan Engine
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Dr.Web Antivirus for Linux/FreeBSD/Solaris
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: F-Secure Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: CAI InoculateIT
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: MkS_Vir for Linux (beta)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: MkS_Vir daemon
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: ESET Software NOD32
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: ESET Software NOD32 - Client/Server Version
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Norman Virus Control v5 / Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Panda Antivirus for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: NAI McAfee AntiVirus (uvscan)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: VirusBuster
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: CyberSoft VFind
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Ikarus AntiVirus for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: BitDefender
Feb 14 09:05:11 elmo amavisd[11971]: Found secondary av scanner Clam Antivirus - clamscan at /usr/local/bin/clamscan
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: FRISK F-Prot Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: Trend Micro FileScanner
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: KasperskyLab kavscanner
Feb 14 09:05:11 elmo amavisd[11971]: SpamControl: initializing Mail::SpamAssassin
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: ignore: test message to precompile patterns and load modules
debug: using "/usr/local/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/var/amavis/.spamassassin/user_prefs" for user prefs file
debug: bayes: 11971 tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_toks
debug: bayes: 11971 tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 4 spam(s) in Bayes DB < 200
debug: bayes: 11971 untie-ing
debug: bayes: 11971 untie-ing db_toks
debug: bayes: 11971 untie-ing db_seen
debug: Score set 0 chosen.
debug: Initialising learner
debug: bayes: 11971 tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_toks
debug: bayes: 11971 tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 4 spam(s) in Bayes DB < 200
debug: bayes: 11971 untie-ing
debug: bayes: 11971 untie-ing db_toks
debug: bayes: 11971 untie-ing db_seen
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.879
debug: running raw-body-text per-line regexp tests; score so far=1.879
debug: running uri tests; score so far=1.879
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.879
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: all '*To' addrs:
debug: running meta tests; score so far=1.879
debug: is spam? score=1.879 required=5 tests=DATE_MISSING,NO_REAL_NAME
Feb 14 09:05:34 elmo amavisd[11971]: SpamControl: done

SpamAssassin, AmaVis, and Sendmail assistance needed [ In reply to ]

satalk at elmo

Feb 14, 2004, 3:35 PM

Post #2 of 3 (737 views)

Permalink

RE: SpamAssassin, AmaVis, and Sendmail assistance needed [ In reply to ]

mwestern at sola

Feb 15, 2004, 10:07 PM

Post #3 of 3 (731 views)

Permalink

this is not what you want to hear, but i originally tried using Amavis with
spamassassin and had a lot of trouble with it. i stuffed around for about a
week try9ing to learn how it worked. then i stumbed on MailScanner and just
about fell over with how easy it is to setup and use. has options for a
number of virus scanners including f-prot, a free one for personal use, not
to mention you can do blocking by ext as well....

sorry i'm no help to you with what you are trying to do, but i found amavis
hard to use.

anyway good luck.
M

-----Original Message-----
From: SAtalk Mail User [mailto:satalk@elmo.thebuc.com]
Sent: Sunday, February 15, 2004 2:40 AM
To: spamassassin-users@incubator.apache.org
Subject: SpamAssassin, AmaVis, and Sendmail assistance needed

Hello all guru's

I am a hard time trying to get amavis-new implemented with SpamAssassin,
(great application). I have been getting some virus through my email that
my user have been complaining about, I know that I could go out and purchase
a corporate Tool and make sure that every laptop and desktop has the latest
and greatest version and virus update file. I would like to implement
amavis with Sendmail MTA and Spamassassin. I am able to install and
configure
clamd, amavis, SpamAssassin, and sendmail with no problems separate of each
other, with the exception of SpamAssassin and sendmail. SpamAssassin is
integrated well with sendmail, but when I try to enter the following entry
in the sendmail.cf file:

#Mlocal, P=/usr/sbin/amavis, F=lsDFMAw5:/|@qPmn9S,
# S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
# T=DNS/RFC822/X-Unix, U=amavis:amavis,
# A=amavis $f $u -- /usr/bin/mail.local -d $u

or

#Mlocal, P=/usr/sbin/amavis, F=lsDFMAw5:/|@qrn9, S=10/30, R=20/40,
# T=DNS/RFC822/X-Unix,
# A=amavis $f $u -- /bin/mail.local -d $u

I then start having issues with sendmail not able to work. The issues that
I start having is when I run a test with an email that has a test string
for a virus all sendmail does is run in a loop and fills up my mqueue
directory, also at times when it does not loop with the second entry from
above the /usr/sbin/amavis fails with the following error,
"failed EX_TEMPFAIL".

I have attached the output from amavis debug-sa and if needed I can send
along the amavis.conf file, I did not want to send it due to the size of
the email with the configuration file.

I am needing some assistance on setting up sendmail, I do not use postfix
nor
procmail configuration files. I would like to integrate this directly into
the sendmail configuration file if I could. Any and all assistance would
be greatly appreciated.

Thanks very much for the Assistance in Advance

Spam Administrator/Email Administrator(Bryan)

#### Output from amavisd debug-sa

# amavisd debug-sa
Feb 14 09:05:07 elmo amavisd[11971]: starting. amavisd at elmo
amavisd-new-20030616-p7, Unicode aware, LANG=en_US.UTF-8
Feb 14 09:05:08 elmo amavisd[11971]: Perl version 5.008002
Feb 14 09:05:08 elmo amavisd[11971]: Module Amavis::Conf 1.15
Feb 14 09:05:08 elmo amavisd[11971]: Module Archive::Tar 1.08
Feb 14 09:05:08 elmo amavisd[11971]: Module Archive::Zip 1.09
Feb 14 09:05:08 elmo amavisd[11971]: Module Compress::Zlib 1.33
Feb 14 09:05:08 elmo amavisd[11971]: Module Convert::TNEF 0.17
Feb 14 09:05:08 elmo amavisd[11971]: Module Convert::UUlib 1.0
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Entity 5.404
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Parser 5.406
Feb 14 09:05:08 elmo amavisd[11971]: Module MIME::Tools 5.411
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::Header 1.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::Internet 1.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Mail::SpamAssassin 2.60
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::Cmd 2.24
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::DNS 0.42
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::SMTP 2.26
Feb 14 09:05:08 elmo amavisd[11971]: Module Net::Server 0.86
Feb 14 09:05:08 elmo amavisd[11971]: Module Time::HiRes 1.52
Feb 14 09:05:08 elmo amavisd[11971]: Module Unix::Syslog 0.99
Feb 14 09:05:08 elmo amavisd[11971]: Found myself: /usr/sbin/amavisd -c
/etc/amavisd.conf
Feb 14 09:05:08 elmo amavisd[11971]: Lookup::SQL code NOT loaded
Feb 14 09:05:08 elmo amavisd[11971]: Lookup::LDAP code NOT loaded
Feb 14 09:05:08 elmo amavisd[11971]: AMCL-in protocol code loaded
Feb 14 09:05:08 elmo amavisd[11971]: SMTP-in protocol code loaded
Feb 14 09:05:08 elmo amavisd[11971]: ANTI-VIRUS code loaded
Feb 14 09:05:08 elmo amavisd[11971]: ANTI-SPAM code loaded
Feb 14 09:05:08 elmo amavisd[11971]: Net::Server: 2004/02/14-09:05:08 Amavis
(type Net::Server::PreForkSimple) starting! pid(11971)
Feb 14 09:05:09 elmo amavisd[11971]: Net::Server: Binding to UNIX socket
file /var/amavis/amavisd.sock using SOCK_STREAM
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Binding to TCP port 10024
on host 127.0.0.1
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Setting gid to "802 802"
Feb 14 09:05:10 elmo amavisd[11971]: Net::Server: Setting uid to "804"
Feb 14 09:05:10 elmo amavisd[11971]: Found $file at /usr/bin/file
Feb 14 09:05:10 elmo amavisd[11971]: Found $arc at /usr/bin/arc
Feb 14 09:05:10 elmo amavisd[11971]: Found $gzip at /usr/bin/gzip
Feb 14 09:05:11 elmo amavisd[11971]: Found $bzip2 at /usr/bin/bzip2
Feb 14 09:05:11 elmo amavisd[11971]: No $lzop, not using it
Feb 14 09:05:11 elmo amavisd[11971]: Found $lha at /usr/bin/lha
Feb 14 09:05:11 elmo amavisd[11971]: Found $unarj at /usr/bin/unarj
Feb 14 09:05:11 elmo amavisd[11971]: Found $uncompress at
/usr/bin/uncompress
Feb 14 09:05:11 elmo amavisd[11971]: No $unfreeze, not using it
Feb 14 09:05:11 elmo amavisd[11971]: Found $unrar at /usr/bin/unrar
Feb 14 09:05:11 elmo amavisd[11971]: Found $zoo at /usr/bin/zoo
Feb 14 09:05:11 elmo amavisd[11971]: Found $cpio at /bin/cpio
Feb 14 09:05:11 elmo amavisd[11971]: Using internal av scanner code for
(primary) Clam Antivirus-clamd
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab AVP
- aveclient
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab
AntiViral Toolkit Pro (AVP)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: KasperskyLab
AVPDaemonClient
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: H+BEDV AntiVir
or CentralCommand Vexira Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Command
AntiVirus for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Symantec
CarrierScan via Symantec CommandLineScanner
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Symantec
AntiVirus Scan Engine
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Dr.Web Antivirus
for Linux/FreeBSD/Solaris
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: F-Secure
Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: CAI InoculateIT
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: MkS_Vir for
Linux (beta)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: MkS_Vir daemon
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: ESET Software
NOD32
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: ESET Software
NOD32 - Client/Server Version
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Norman Virus
Control v5 / Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Panda Antivirus
for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: NAI McAfee
AntiVirus (uvscan)
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: VirusBuster
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: CyberSoft VFind
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: Ikarus AntiVirus
for Linux
Feb 14 09:05:11 elmo amavisd[11971]: No primary av scanner: BitDefender
Feb 14 09:05:11 elmo amavisd[11971]: Found secondary av scanner Clam
Antivirus - clamscan at /usr/local/bin/clamscan
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: FRISK F-Prot
Antivirus
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: Trend Micro
FileScanner
Feb 14 09:05:11 elmo amavisd[11971]: No secondary av scanner: KasperskyLab
kavscanner
Feb 14 09:05:11 elmo amavisd[11971]: SpamControl: initializing
Mail::SpamAssassin
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: ignore: test message to precompile patterns and load modules
debug: using "/usr/local/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/var/amavis/.spamassassin/user_prefs" for user prefs file
debug: bayes: 11971 tie-ing to DB file R/O
/var/amavis/.spamassassin/bayes_toks
debug: bayes: 11971 tie-ing to DB file R/O
/var/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 4 spam(s) in Bayes DB < 200
debug: bayes: 11971 untie-ing
debug: bayes: 11971 untie-ing db_toks
debug: bayes: 11971 untie-ing db_seen
debug: Score set 0 chosen.
debug: Initialising learner
debug: bayes: 11971 tie-ing to DB file R/O
/var/amavis/.spamassassin/bayes_toks
debug: bayes: 11971 tie-ing to DB file R/O
/var/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 4 spam(s) in Bayes DB < 200
debug: bayes: 11971 untie-ing
debug: bayes: 11971 untie-ing db_toks
debug: bayes: 11971 untie-ing db_seen
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.879
debug: running raw-body-text per-line regexp tests; score so far=1.879
debug: running uri tests; score so far=1.879
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.879
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: all '*To' addrs:
debug: running meta tests; score so far=1.879
debug: is spam? score=1.879 required=5 tests=DATE_MISSING,NO_REAL_NAME
Feb 14 09:05:34 elmo amavisd[11971]: SpamControl: done