spam mails kommen nicht an

K

kantiran

Registered User
Hallo,

ich habe wie im Forum beschrieben spamassassin mit clamav+qsheff installiert.
Funktioniert soweit ich das beurteilen auch korrekt.
Es kommen alle normalen E-Mails an.
Nur spam-Mails (habe ein Testmail mit Spaminhalten verschickt) kommt NICHT an.

Ich finde leider keine Log-Datei des spamassassin um zu sehen wo der Fehler liegt.
Hier ein Auszug aus der mail.info
Code: 
Apr  1 16:37:34 h1232389 qmail: 1175438254.669721 status: exiting
Apr  1 16:37:34 h1232389 clamd[11854]: Socket file removed. 
Apr  1 16:37:34 h1232389 clamd[11854]: Pid file removed. 
Apr  1 16:37:34 h1232389 clamd[11854]: --- Stopped at Sun Apr  1 16:37:34 2007 
Apr  1 16:37:50 h1232389 clamd[15367]: clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i686) 
Apr  1 16:37:50 h1232389 clamd[15367]: Log file size limited to 1048576 bytes. 
Apr  1 16:37:50 h1232389 clamd[15367]: Reading databases from /var/lib/clamav 
Apr  1 16:37:53 h1232389 imapd: IMAP connect from @ [84.155.100.61]Unable to connect to Plesk Database: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
Apr  1 16:37:53 h1232389 imapd: System error 2: No such file or directory
Apr  1 16:37:53 h1232389 imapd: Unable to connect to the mysql database
Apr  1 16:37:53 h1232389 imapd: Unable to connect to the mysql database
Apr  1 16:37:53 h1232389 imapd: 
Apr  1 16:37:53 h1232389 imapd: System error 2: No such file or directory
Apr  1 16:37:54 h1232389 qmail: 1175438274.730105 status: local 0/10 remote 0/20
Apr  1 16:37:57 h1232389 clamd[15367]: Loaded 104593 signatures. 
Apr  1 16:37:57 h1232389 clamd[15367]: Unix socket file /var/lib/clamav/clamd-socket 
Apr  1 16:37:57 h1232389 clamd[15367]: Setting connection queue length to 15 
Apr  1 16:37:57 h1232389 clamd[15367]: Archive: Archived file size limit set to 10485760 bytes. 
Apr  1 16:37:57 h1232389 clamd[15367]: Archive: Recursion level limit set to 8. 
Apr  1 16:37:57 h1232389 clamd[15367]: Archive: Files limit set to 1000. 
Apr  1 16:37:57 h1232389 clamd[15367]: Archive: Compression ratio limit set to 250. 
Apr  1 16:37:57 h1232389 clamd[15367]: Archive support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: Algorithmic detection enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: Portable Executable support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: ELF support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: Mail files support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: Mail: Recursion level limit set to 64. 
Apr  1 16:37:57 h1232389 clamd[15367]: OLE2 support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: PDF support disabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: HTML support enabled. 
Apr  1 16:37:57 h1232389 clamd[15367]: Self checking every 1800 seconds. 
Apr  1 16:37:58 h1232389 spamd[15558]: server started on UNIX domain socket /tmp/spamd_full.sock (running version 3.0.2) 
Apr  1 16:37:58 h1232389 spamd[15558]: server successfully spawned child process, pid 15560 
Apr  1 16:38:04 h1232389 qmail: 1175438284.580963 alert: cannot start: qmail-send is already running
Apr  1 16:38:05 h1232389 freshclam[15723]: freshclam daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i686) 
Apr  1 16:38:05 h1232389 freshclam[15723]: ClamAV update process started at Sun Apr  1 16:38:05 2007 
Apr  1 16:38:05 h1232389 freshclam[15723]: main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm) 
Apr  1 16:38:05 h1232389 freshclam[15723]: daily.inc is up to date (version: 2987, sigs: 20642, f-level: 14, builder: ccordes) 
Apr  1 16:38:05 h1232389 freshclam[15723]: -------------------------------------- 
Apr  1 16:39:10 h1232389 imapd: IMAP connect from @ [84.155.100.61]IMAP connect from @ [84.155.100.61]IMAP connect from @ [84.155.100.61]INFO: LOGIN, user=sonstiges, ip=[84.155.100.61], protocol=IMAP
Apr  1 16:39:10 h1232389 imapd: LOGIN, user=spam, ip=[84.155.100.61], protocol=IMAP
Apr  1 16:39:10 h1232389 imapd: LOGIN, user=markus, ip=[84.155.100.61], protocol=IMAP
Apr  1 16:39:48 h1232389 relaylock: /var/qmail/bin/relaylock: mail from 194.25.134.83:60985 (mailout07.sul.t-online.com)
Apr  1 16:39:48 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused
Apr  1 16:39:49 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#2 of 3): Connection refused
Apr  1 16:39:50 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused
Apr  1 16:39:51 h1232389 spamc[15823]: connection attempt to spamd aborted after 3 retries
Apr  1 16:43:34 h1232389 imapd: IMAP connect from @ [84.155.100.61]INFO: LOGIN, user=sonstiges, ip=[84.155.100.61], protocol=IMAP
Apr  1 16:43:36 h1232389 imapd: 1175438616.855917 LOGOUT, user=sonstiges, ip=[84.155.100.61], headers=0, body=0, rcvd=134, sent=542, maildir=/var/qmail/mailnames/foerg-online.de/sonstiges/Maildir
Apr  1 16:43:37 h1232389 imapd: 1175438617.67980 LOGOUT, user=sonstiges, ip=[84.155.100.61], headers=0, body=0, rcvd=319, sent=3525, maildir=/var/qmail/mailnames/foerg-online.de/sonstiges/Maildir
Apr  1 16:43:37 h1232389 imapd: 1175438617.786927 LOGOUT, user=markus, ip=[84.155.100.61], headers=0, body=0, rcvd=622, sent=2221, maildir=/var/qmail/mailnames/foerg-online.de/markus/Maildir
Apr  1 16:43:37 h1232389 imapd: 1175438617.999056 LOGOUT, user=spam, ip=[84.155.100.61], headers=0, body=0, rcvd=216, sent=848, maildir=/var/qmail/mailnames/foerg-online.de/spam/Maildir

Und hier die mail.err
Code: 
Apr  1 16:38:04 h1232389 qmail: 1175438284.580963 alert: cannot start: qmail-send is already running
Apr  1 16:39:48 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused
Apr  1 16:39:49 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#2 of 3): Connection refused
Apr  1 16:39:50 h1232389 spamc[15823]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused
Apr  1 16:39:51 h1232389 spamc[15823]: connection attempt to spamd aborted after 3 retries

Soweit ich das richtig interpretiere findet er spam-Inhalte und kann
sie aus irgendeinem Grund nicht an den spamd weitergeben.
Der soll ja die Mail als ***SPAM*** markieren und zustellen.

Hat jemand eine Idee?

Gruß,
kantiran
 
Ergänzung zum Thema

Hab ich vergessen, hier noch die local.cf meines spamassassin:

Code: 
# SpamAssassin config file for version 3.x
# NOTE: NOT COMPATIBLE WITH VERSIONS 2.5 or 2.6
# See http://www.yrex.com/spam/spamconfig25.php for earlier versions
# Generated by http://www.yrex.com/spam/spamconfig.php (version 1.50)

# How many hits before a message is considered spam.
required_score           5.0

# Change the subject of suspected spam
rewrite_header subject         *****SPAM*****

# Encapsulate spam in an attachment (0=no, 1=yes, 2=safe)
report_safe             1

# Enable the Bayes system
use_bayes               1

# Enable Bayes auto-learning
bayes_auto_learn              1

# Enable or disable network checks
skip_rbl_checks         0
use_razor2              1
use_dcc                 1
use_pyzor               1

# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
# - english german
ok_languages            en de

# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales              en de

kantiran
 
Hallo!

Kommen die Fehlermeldungen im Maillog auch nach einem:
Code: 
/etc/init.d/spamd stop
/etc/init.d/spamd start

Gruß flyingoffice
 
Die Ausgabe von 'ps aux':


Code: 
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.0    604   248 ?        Ss   17:42   0:00 init [3]
root     23986  0.0  0.0   1456   592 ?        Ss   17:42   0:00 /sbin/syslogd -a /var/lib/named/dev/log -a /var/lib/ntp/dev/log -a /var/lib/stunnel/dev/log
root     23992  0.0  0.0   3984   784 ?        Ss   17:42   0:00 /usr/sbin/saslauthd -n 2 -a pam
root     23993  0.0  0.0   3984   468 ?        S    17:42   0:00 /usr/sbin/saslauthd -n 2 -a pam
root     23998  0.0  0.2   9160  5624 ?        Ss   17:42   0:00 /usr/bin/perl /usr/local/src/webmin-1.330/miniserv.pl /etc/webmin/miniserv.conf
vscan    24017  0.0  1.1  38352 24664 ?        Ss   17:42   0:04 /usr/sbin/clamd
root     24029  0.0  0.0   2664   708 ?        S    17:42   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
root     24038  0.0  0.0   2664   700 ?        S    17:42   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
root     24040  0.0  0.0   2568   772 ?        S    17:42   0:00 /usr/sbin/courierlogger imapd
root     24047  0.0  0.0   2664   700 ?        S    17:42   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
root     24049  0.0  0.0   2436   620 ?        S    17:42   0:00 /usr/sbin/courierlogger imapd-ssl
root     24056  0.0  0.0   2436   620 ?        S    17:42   0:00 /usr/sbin/courierlogger pop3d
root     24059  0.0  0.0   2664   700 ?        S    17:42   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
root     24061  0.0  0.0   2436   620 ?        S    17:42   0:00 /usr/sbin/courierlogger pop3d-ssl
root     24069  0.0  0.0   4524  1216 ?        Ss   17:42   0:00 /usr/sbin/sshd -o PidFile=/var/run/sshd.init.pid
root     24075  0.0  0.0   2080   884 ?        Ss   17:42   0:00 /usr/sbin/xinetd
named    24124  0.0  0.1  36428  2864 ?        Ssl  17:42   0:00 /usr/sbin/named -t /var/lib/named -u named
root     24138  0.0  0.0   2376  1136 ?        S    17:42   0:00 /bin/sh /usr/bin/mysqld_safe --user=mysql --pid-file=/var/lib/mysql/mysqld.pid --socket=/var/lib/mysql/mysql.sock --datadir=/var/lib/mysql
mysql    24174  0.0  0.6 104264 13872 ?        Sl   17:42   0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/mysqld.pid --skip-locking --port=3306 --socket=/var/lib/mysql/mysql.sock
qmails   24182  0.0  0.0   1436   376 ?        S    17:42   0:00 qmail-send
qmaill   24183  0.0  0.0   1388   440 ?        S    17:42   0:00 splogger qmail
root     24184  0.0  0.0   1416   332 ?        S    17:42   0:00 qmail-lspawn ./Maildir/
qmailr   24185  0.0  0.0   1412   328 ?        S    17:42   0:00 qmail-rspawn
qmailq   24186  0.0  0.0   1380   308 ?        S    17:42   0:00 qmail-clean
root     24237  0.0  0.7  37904 16360 ?        Ss   17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root     24243  0.0  0.3  37016  6280 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun   24244  0.0  0.3  37904  8064 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun   24245  0.0  0.3  37904  7784 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun   24246  0.0  0.3  37904  7524 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun   24247  0.0  0.3  37904  7512 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
wwwrun   24248  0.0  0.3  37904  7512 ?        S    17:42   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
root     24266  0.0  0.2  35608  4984 ?        Ss   17:42   0:00 /usr/local/psa/admin/bin/httpsd
psaadm   24270  0.0  1.4  44636 30888 ?        S    17:42   0:03 /usr/local/psa/admin/bin/httpsd
root     24322  0.0  0.0   1668   696 ?        Ss   17:42   0:00 /usr/sbin/cron
vscan    24328  0.0  0.0   3900   860 ?        Ss   17:42   0:00 /usr/bin/freshclam -d
root     27922  0.0  1.0  24708 22164 ?        Ss   18:09   0:00 /usr/sbin/spamd -x -d -c -L --max-children=5
root     27923  0.0  1.1  25516 22912 ?        S    18:09   0:00 spamd child
root     27924  0.0  0.9  24708 20444 ?        S    18:09   0:00 spamd child
root     27925  0.0  0.9  24708 20444 ?        S    18:09   0:00 spamd child
root     27926  0.0  0.9  24708 20444 ?        S    18:09   0:00 spamd child
root     27927  0.0  0.9  24708 20444 ?        S    18:09   0:00 spamd child
wwwrun   28377  0.0  0.3  37904  7512 ?        S    18:23   0:00 /usr/sbin/httpd2-prefork -f /etc/apache2/httpd.conf
psaadm    1372  0.0  1.1  40284 24576 ?        S    19:22   0:01 /usr/local/psa/admin/bin/httpsd
root      4070  0.0  0.1   8988  2656 ?        Ss   20:13   0:00 sshd: root@pts/0
root      4073  0.0  0.0   2704  1740 pts/0    Ss   20:13   0:00 -bash
root      5123  0.0  0.0   2380   856 pts/0    R+   20:13   0:00 ps aux

kantiran
 
You must log in or register to reply here.
Back
Top