[SA-exim] Novice Installation Question.

Paul Matthews P.W.Matthews at swansea.ac.uk
Thu, 25 Jul 2002 12:03:12 +0100 (BST)


 
> > So I gave up with this and tried the overwrite src/local_scan.c approach.
> > Again everything compiled OK and seems to run OK. When I set 
> > 
> > SAEximRunCond: 1
> > 
> > I get:
> > 
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 SA: SAEximRunCond expand returned: '1'
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 SA: check succeeded, running spamc
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 SA: Unexpected error on header line write 
> > (but message was accepted), file ../src/local_scan.c, line 596: Broken pipe
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 SA: Writing message to /usr/local/exim/spool/SAerrorsave/1027425689
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 <= root@swansea.ac.uk H=mhs (mhs.swan.ac.uk) 
> > [137.44.1.33] P=esmtp S=1035 id=200207231200.NAA23141@www.swan.ac.uk
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 => |/usr/local/bin/filter 
> > <ccpaulm@ccrollins.swan.ac.uk> R=userforward T=address_pipe
> > 2002-07-23 13:01:29 17WyM5-0005cQ-00 Completed
> > 
> > It delivers the message to my mailbox OK. I thought it may be a permissions
> > thing. I'm currently running spamd as 
> > 
> > 	spamd -d -u exim
> 
> That one should work
> It looks like spamc dies when sa-exim writes to it.
> 
> Does spamc work?
> spamc < /tmp/mailfile

Hi Marc.

It looks OK to me ? The output is shown below:

spamc < sample-spam.txt

........lots of headers........
........lots of headers........
........lots of headers........
...............................
X-Spam-Status: Yes, hits=31.1 required=5.0
        tests=UNDISC_RECIPS,FROM_HAS_MIXED_NUMS,MSGID_HAS_NO_AT,
              SMTPD_IN_RCVD,INVALID_MSGID,ALL_CAPS_HEADER,NO_REAL_NAME,
              INVALID_DATE,HOME_EMPLOYMENT,DRASTIC_REDUCED,
              ONCE_IN_LIFETIME,CALL_FREE,REMOVE_SUBJ,LINES_OF_YELLING,
              DOUBLE_CAPSWORD,FREQ_SPAM_PHRASE,DATE_IN_PAST_24_48
        version=2.40
X-Spam-Flag: YES
X-Spam-Level: *******************************
X-Spam-Checker-Version: SpamAssassin 2.40 (devel $Id: SpamAssassin.pm,v 1.100 2002/06/20 17:02:41 hughescr Exp $)
X-Spam-Report:   31.1 hits, 5 required;
  *  4.0 -- Valid-looking To "undisclosed-recipients"
  *  2.6 -- From: contains numbers mixed in with letters
  *  2.1 -- Message-Id has no @ sign
  *  2.1 -- Received via SMTPD32 server (SMTPD32-n.n)
  *  1.8 -- Message-Id is not valid, according to RFC-2822
  *  1.6 -- Header with all capitals found
  *  0.5 -- From: does not include a real name
  *  0.5 -- Invalid Date: header (not RFC 822)
  *  2.9 -- BODY: Information on how to work at home (2)
  *  1.0 -- BODY: Drastically Reduced
  *  1.8 -- BODY: Once in a lifetime, apparently
  *  0.7 -- BODY: Contains a tollfree number
  *  3.4 -- BODY: List removal information
  * -0.0 -- BODY: A WHOLE LINE OF YELLING DETECTED
  *  1.1 -- BODY: A word in all caps repeated on the line
  *  2.4 -- Contains phrases frequently found in spam
            [score:  18, hits: all information, are you,]
            [based business, federal legislation, for your,]
            [from our, future mailings, home based, mail]
            [address, our company, permanently removed,]
            [please send, remove the, removed from, subject]
            [line, that can, the subject, word remove, you]
            [for, you like, you need, you not, you with, your]
            [mail]
  *  2.6 -- Date: is 24 to 48 hours before Received: date
.....body of message......
.....body of message......
.....body of message......


Cheers,
Paul.
--------------------------------------------------------------------------
Paul Matthews                                Head of Networking/Postmaster
Library and Information Services,
University of Wales Swansea , Singleton Park, Swansea SA2 8PP, UK

email: P.W.Matthews@swansea.ac.uk                 postmaster@swansea.ac.uk
tel:   +44 (0)1792 295107  mobile: 07802166089     fax: +44 (0)1792 295851
--------------------------------------------------------------------------