Цикличная проверка почты Spamassassin-ом

На доскональное знание данной темы, не может претендовать, пожалуй ни один спец, из ныне живущих на земле. ;-)
Так поможем друг другу.

Модераторы: Trinity admin`s, Free-lance moderator`s

Ответить
Аватара пользователя
ABH
Junior member
Сообщения: 1
Зарегистрирован: 03 мар 2009, 13:57
Откуда: Ufa

Цикличная проверка почты Spamassassin-ом

Сообщение ABH » 03 мар 2009, 14:25

Прошу знающих подсказать, что за ерунда творится с ассассином, письмо проверяет по несколько раз
Mar 3 13:57:19 REDSTATION sendmail[12924]: NOQUEUE: connect from e1.local
Mar 3 13:57:19 REDSTATION sendmail[12924]: AUTH: available mech=PLAIN LOGIN ANONYMOUS, allowed mech=EXTERNAL GSSAPI KERBEROS_V4 DIGEST-MD5 CRAM-MD5
Mar 3 13:57:19 REDSTATION sendmail[12924]: n238vJHB012924: Milter (spamassassin): init success to negotiate
Mar 3 13:57:19 REDSTATION sendmail[12924]: n238vJHB012924: Milter: connect to filters
Mar 3 13:57:19 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=connect, continue
Mar 3 13:57:19 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=helo, continue
Mar 3 13:57:19 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=mail, continue
Mar 3 13:57:36 REDSTATION spamass-milter[12901]: Could not retrieve sendmail macro "r"!. Please add it to confMILTER_MACROS_ENVRCPT for better spamassassin results
Mar 3 13:57:36 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=rcpt, continue
Mar 3 13:57:36 REDSTATION sendmail[12924]: n238vJHB012924: from=user2@local, size=6066, class=0, nrcpts=1, msgid=<D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local>, proto=ESMTP, daemon=MTA, relay=e1.local
Mar 3 13:57:36 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=header, continue
Mar 3 13:57:36 REDSTATION last message repeated 14 times
Mar 3 13:57:36 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=eoh, continue
Mar 3 13:57:36 REDSTATION sendmail[12924]: n238vJHB012924: milter=spamassassin, action=body, continue
Mar 3 13:57:36 REDSTATION spamd[12911]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52738
Mar 3 13:57:36 REDSTATION spamd[12911]: spamd: processing message <D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local> for root:501
Mar 3 13:57:40 REDSTATION spamd[12911]: spamd: identified spam (6.1/5.0) for root:501 in 4.0 seconds, 6485 bytes.
Mar 3 13:57:40 REDSTATION spamd[12911]: spamd: result: Y 6 - ALL_TRUSTED,AWL,HTML_FONT_SIZE_LARGE,HTML_IMAGE_ONLY_28,HTML_MESSAGE scantime=4.0,size=6485,user=root,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52738,mid=<D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local>,autolearn=no
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter add: header: X-Spam-Flag: YES
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter add: header: X-Spam-Status: Yes, score=6.1 required=5.0 tests=ALL_TRUSTED,AWL,\n\tHTML_FONT_SIZE_LARGE,HTML_IMAGE_ONLY_28,HTML_MESSAGE autolearn=no\n\tversion=3.2.5
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter add: rcpt: admin@local
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter add: header: X-Spam-Level: ******
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on REDSTATION.org
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter change: header Subject: from =?koi8-r?B?9OHt7/bl7u756iDi8u/r5fL=?= to [*SPAM*6.1 points*] =?koi8-r?B?9OHt7/bl7u756iDi8u/r5fL=?=
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter change: header Content-Type: from multipart/alternative;\n\tboundary="_000_D87C65D1E2C4E74B9741A0873258373452B6EE34A5E1local_" to multipart/mixed; boundary="----------=_49ACF104.01FED534"
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter message: body replaced
Mar 3 13:57:40 REDSTATION sendmail[12924]: n238vJHB012924: Milter accept: message
Mar 3 13:57:40 REDSTATION spamd[12907]: prefork: child states: II
Mar 3 13:57:40 REDSTATION spamd[12911]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52739
Mar 3 13:57:40 REDSTATION spamd[12911]: spamd: processing message <D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local> for root:501
Mar 3 13:57:41 REDSTATION spamd[12911]: spamd: identified spam (7.5/5.0) for root:501 in 0.9 seconds, 8628 bytes.
Mar 3 13:57:41 REDSTATION spamd[12911]: spamd: result: Y 7 - ALL_TRUSTED,AWL,HTML_FONT_SIZE_LARGE,HTML_IMAGE_ONLY_28,HTML_MESSAGE,RU_SPAM_KOI8,RU_SUSPECTED_SPAM_KOI8 scantime=0.9,size=8628,user=root,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52739,mid=<D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local>,autolearn=no
Mar 3 13:57:41 REDSTATION sendmail[12935]: n238vJHB012924: to=<user1@redstation.org>, delay=00:00:05, xdelay=00:00:01, mailer=local, pri=68521, dsn=2.0.0, stat=Sent
Mar 3 13:57:41 REDSTATION sendmail[12935]: n238vJHB012924: SMTP outgoing connect on REDSTATION.org
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS: ClientCertFile missing
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS: ClientKeyFile missing
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS: CACertPath missing
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS: CACertFile missing
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS: CRLFile missing
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS=client, init=1
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS=client, start=ok
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS=client, relay=[172.17.*.*], version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-MD5, bits=128/128
Mar 3 13:57:41 REDSTATION sendmail[12935]: STARTTLS=client, cert-subject=/CN=asteroid, cert-issuer=/CN=asteroid, verifymsg=unable to get local issuer certificate
Mar 3 13:57:41 REDSTATION sendmail[12935]: AUTH=client, relay=[172.17.*.*], mech=, bits=0
Mar 3 13:57:41 REDSTATION spamd[12907]: prefork: child states: II
Mar 3 13:57:41 REDSTATION sendmail[12935]: n238vJHB012924: to=admin@local, delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=68521, relay=[172.17.*.*] [172.17.*.*], dsn=2.0.0, stat=Sent (<D87C65D1E2C4E74B9741A0873258373452B6EE34A5@E1.local> Queued mail for delivery)
Mar 3 13:57:41 REDSTATION sendmail[12935]: n238vJHB012924: done; delay=00:00:05, ntries=1

соответственно запись в прокмаил
Subject: [*SPAM*7.5 points*] [*SPAM*6.1 points*] =?koi8-r?B?9OHt7/bl7u756iDi8u
Folder: spam 10553
ниже файлы конфигурации:
sendmail.mc
divert(-1)dnl
include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
VERSIONID(`setup for linux')dnl
OSTYPE(`linux')dnl
define(`confLOG_LEVEL', `14')dnl
define(`confDEF_USER_ID', ``8:12'')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST', `True')dnl
define(`confDONT_PROBE_INTERFACES', `True')dnl
define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl
define(`ALIAS_FILE', `/etc/aliases')dnl
define(`STATUS_FILE', `/var/log/mail/statistics')dnl
define(`UUCP_MAILER_MAX', `2000000')dnl
define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
define(`LOCAL_MAILER_CHARSET', `koi8-r')dnl
define(`SMTP_MAIL_CHARSET', `koi8-r')dnl
define(`confDEF_CHAR_SET', `koi8-r')dnl
define(`confTO_IDENT', `0')dnl

FEATURE(`no_default_msa', `dnl')dnl
FEATURE(`smrsh', `/usr/sbin/smrsh')dnl
FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl
FEATURE(`access_db', `hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`blacklist_recipients')dnl
EXPOSED_USER(`root')dnl
FEATURE(`accept_unresolvable_domains')dnl
LOCAL_DOMAIN(`localhost.localdomain')dnl

dnl MAILER(`local')dnl
MAILER(`smtp')dnl
MAILER(`procmail')dnl
################################################################################
INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass-milter, F=, T=C:15m;S:4m;R:4m;E:10m')dnl
define(`confMILTER_MACROS_CONNECT',`b, j, _, {daemon_name}, {if_name}, {if_addr}')dnl
define(`confMILTER_LOG_LEVEL',`14')
define(`confMILTER_MACROS_ENVRCPT',`r')dnl
define(`confMILTER_MACROS_ENVRCPT',`v')dnl
параметры запуска спам-фильтра
daemon /usr/local/sbin/spamass-milter -f -p /var/run/spamass-milter -B admin@local
daemon /usr/bin/spamd -d -u Porky

local.cf
trusted_networks 192.168/16 # all in 192.168.*.* and 127.*.*.*
trusted_networks 172.17/16

# whitelist
whitelist_from localhost

# blacklist


# subject
rewrite_header Subject [*SPAM*_HITS_ points*]


report_safe 1
use_terse_report 0
use_bayes 1
skip_rbl_checks 0
use_razor2 0
use_dcc 0
use_pyzor 0
always_add_report 1

auto_whitelist_path /etc/mail/spamassassin/auto_whitelist
bayes_path /etc/mail/spamassassin/bayes


ok_languages ru en
ok_locales ru en
report_charset koi8-r
lang ru

clear_report_template
report This message has identified this incoming email as possible spam.
report
report Content preview: _PREVIEW_
report
report Content analysis details: (_HITS_ points, _REQD_ required, _BAYES_ bayes score)
report
report pts rule name description
report ---- ---------------------- --------------------------------------------------
report _SUMMARY_
clear_unsafe_report_template

required_hits 5.0

score FROM_ILLEGAL_CHARS 1.5
score HEAD_ILLEGAL_CHARS 1.5
score SUBJ_ILLEGAL_CHARS 1.5
score FORGED_IMS_TAGS 0.5
score HABEAS_SWE 0.0
файл procmailrc
SHELL=/bin/sh
PATH=/bin:/usr/bin
LOGABSTRACT=all
LOGFILE=/var/log/procmail.log
VERBOSE=off
MAILDIR=/var/spool/mail
##DEFAULT=$MAILDIR/spam

#
:0fw: spamassassin.lock
* < 256000
| /usr/bin/spamc

# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
/dev/null

#
:0:
* ^X-Spam-Status: Yes
spam

Вернуться в «Серверы - ПО, Unix подобные системы»

Кто сейчас на конференции

Сейчас этот форум просматривают: Bing [Bot] и 18 гостей