Its been a while, so take what I say with a grain of salt, but it appears to me that spamassasin is working just fine. However it looks like Bayes isn't trained properly. Google around for how to teach Bayes about spam so it catches more. It also helps to show Bayes what isn't spam. I used to use a script that would go through every users IMAP folders, things in spam were trained as spam and things in the inbox that had been seen and not marked for more than 24 hours were marked as not spam. After a few days Bayes became fairly accurate. Those x-spam-* headers are all spam assassin headers. The headers indicate that the message they are for is VERY close to being spam, with Bayes being unsure (Bayes_50 is unsure) with a score of 0.8 overall score of 3.25 with 3.5 being required to flag a message as spam. On May 19, 2013 5:58 PM, "brad" <bkn@ithryn.net> wrote:

Hi All,

i've been getting more spam over the last couple of days. It appears spamd is not running on my ubuntu 10.04 server; however the headers of the spam messages have X-Spam-* flags. I'm not sure what might be adding the spam headers, perhaps its upstream (or clamav). I wanted to start using spam assassin, but that appears to crash when i run the following, which i dug out from the init scripts,

sudo /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs \ --max-children 5 --helper-home-dir --pidfile=/var/run/spamd.pid

This line results in the following output: May 19 17:50:03.557 [8665] info: rules: meta test T_SUBJ_BRKN_WORDNUMS has dependency 'DKIM_SIGNED' with a zero score May 19 17:50:03.626 [8665] info: collectd: Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.10/IO/Socket.pm line 114. May 19 17:50:03.726 [8665] info: spamd: server started on port 783/tcp (running version 3.3.1) May 19 17:50:03.726 [8665] info: spamd: server pid: 8665 May 19 17:50:03.729 [8665] info: spamd: server successfully spawned child process, pid 8743 May 19 17:50:03.733 [8665] info: spamd: server successfully spawned child process, pid 8744 May 19 17:50:03.736 [8665] info: prefork: child states: IS May 19 17:50:03.736 [8665] info: prefork: child states: II [1] 8665 alarm sudo /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs --max-children 5

I'm not sure what 'alarm' means. I tried running it with debugging messages, none of which seemed useful.

Below are the relavent heads from one spam message, X-Virus-Scanned: Ubuntu Server Edition amavisd-new at ithryn.com X-Spam-Flag: NO X-Spam-Score: 3.25 X-Spam-Level: *** X-Spam-Status: No, score=3.25 required=3.5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.723, RCVD_IN_BRBL_LASTEXT=1.449, SPF_PASS=-0.1] autolearn=no

Anyone have advice to get spamd running correctly? thanks, - brad

_______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug