SpamAssassin

[int]

Does anyone know where you would add TRUSTED_RULESETS for SpamAssassin?

I found a few "rulesemporium" type of sites that have new, updated CF files for SpamAssassin, and i'd like to add them to reduce spam on my servers, but i can't figure out where InterWorx keeps the config file I need to add the TRUSTED_RULESETS line ... to allow these custom rulesets.

I know the CF files themselves are kept in /usr/share/spamassassin --- and i know that most SpamAssassin installations (on anything BUT an InterWorx server) usually keeps a .spamassassin folder in each user's home dir?

Anyone have any additional info on this?

[tsl]

int, try "sa-update"!

Have a look at:
http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt

We have the following rulesets in the file:
/etc/mail/spamassassin/sare-sa-update-channels.txt


updates.spamassassin.org
70_sare_adult.cf.sare.sa-update.dostech.net
72_sare_redirect_post3.0.0.cf.sare.sa-update.dostech.net
70_sare_evilnum0.cf.sare.sa-update.dostech.net
70_sare_evilnum1.cf.sare.sa-update.dostech.net
70_sare_evilnum2.cf.sare.sa-update.dostech.net
70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net
70_sare_html.cf.sare.sa-update.dostech.net
70_sare_html4.cf.sare.sa-update.dostech.net
70_sare_header.cf.sare.sa-update.dostech.net
70_sare_specific.cf.sare.sa-update.dostech.net
70_sare_adult.cf.sare.sa-update.dostech.net
72_sare_bml_post25x.cf.sare.sa-update.dostech.net
99_sare_fraud_post25x.cf.sare.sa-update.dostech.net
70_sare_spoof.cf.sare.sa-update.dostech.net
70_sare_random.cf.sare.sa-update.dostech.net
70_sare_oem.cf.sare.sa-update.dostech.net
70_sare_genlsubj.cf.sare.sa-update.dostech.net
70_sare_genlsubj4.cf.sare.sa-update.dostech.net
70_sare_highrisk.cf.sare.sa-update.dostech.net
70_sare_unsub.cf.sare.sa-update.dostech.net
70_sare_uri0.cf.sare.sa-update.dostech.net
70_sare_uri1.cf.sare.sa-update.dostech.net
70_sare_uri2.cf.sare.sa-update.dostech.net
70_sare_uri3.cf.sare.sa-update.dostech.net
70_sare_uri4.cf.sare.sa-update.dostech.net
70_sare_obfu.cf.sare.sa-update.dostech.net
70_sare_obfu2.cf.sare.sa-update.dostech.net
70_sare_obfu3.cf.sare.sa-update.dostech.net
70_sare_obfu4.cf.sare.sa-update.dostech.net
70_sare_stocks.cf.sare.sa-update.dostech.net


Each night we run:

/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart

We currently have a problem with the gpg key but I'm looking into that.

rgds
-tsl-

[int]

Thanks for the reply =)

I followed instructions on that site and downloaded the GPG.KEY, and then tried to import it. I'm having problems as well:


[root@TSH root]# wget http://daryl.dostech.ca/sa-update/sare/GPG.KEY
--01:00:50-- http://daryl.dostech.ca/sa-update/sare/GPG.KEY
=> `GPG.KEY'
Resolving daryl.dostech.ca... done.
Connecting to daryl.dostech.ca[69.61.78.188]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2,522 [text/plain]

100%[====================================>] 2,522 2.41M/s ETA 00:00

01:00:50 (2.41 MB/s) - `GPG.KEY' saved [2522/2522]


[root@TSH root]# sa-update --import GPG.KEY
Can't locate Archive/Tar.pm in @INC (@INC contains: /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at /usr/bin/sa-update line 94.
BEGIN failed--compilation aborted at /usr/bin/sa-update line 94.


[root@TSH root]# /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A
Can't locate Archive/Tar.pm in @INC (@INC contains: /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at /usr/bin/sa-update line 94.
BEGIN failed--compilation aborted at /usr/bin/sa-update line 94.


If ever you come across a solution, I would really appreciate it if you posted it =)

Thanks again!

[tsl]

Ahh, OK I had the "issue" as well...

You need to install the following perl modules in this order:

Algorithm-Diff
Text-Diff
IO-Zlib
Archive-Tar

I have placed the files at:
http://xpanel.xhost.se/sa-update-perl-mods.tgz

Please download an untar the files.
Go into each directory (in above order) and run:

perl Makefile.PL
make
make install

You should now be able to use sa-update.

As for the gpg key I just use --nogpg in the sa-update cmd for now.
If you want to import keys be sure to create the directory:
/etc/mail/spamassassin/sa-update-keys in advance and chmod 700

hth
-tsl-

[int]

Ahh, OK I had the "issue" as well...

You need to install the following perl modules in this order:

Algorithm-Diff
Text-Diff
IO-Zlib
Archive-Tar

I have placed the files at:
http://xpanel.xhost.se/sa-update-perl-mods.tgz

Please download an untar the files.
Go into each directory (in above order) and run:

perl Makefile.PL
make
make install

You should now be able to use sa-update.

As for the gpg key I just use --nogpg in the sa-update cmd for now.
If you want to import keys be sure to create the directory:
/etc/mail/spamassassin/sa-update-keys in advance and chmod 700

hth
-tsl-

Worked beautifully - this should be stickied/added to the InterWorx manual =)

Thanks a lot tsl!

[Catalyst]

Sorry, guys, but why not install the RPM's from up2date/yum (or DAG, even (http://dag.wieers.com/packages/)) rather than compiling these things?

They don't remove cleanly, and may cause problems down the line when mixed with other perl RPM packages.

[tsl]

Catalyst, you're right!

I took a look at DAG and they are sure all there, sorry I didn't know that.

-tsl-

[Catalyst]

perl-IO-Zlib & perl-Archive-Tar are in up2date/yum, for that matter. ;-) Check out that road first.

[int]

This solution was working great for me until Iworx 3.0.x

Now, last night, the cron job didn't run. Instead, I got an email that said this:

error: GPG validation failed!
The update downloaded successfully, but it was not signed with a trusted GPG key. Instead, it was signed with the following keys:

24F434CE

Perhaps you need to import the channel's GPG key? For example:

wget http://spamassassin.apache.org/updates/GPG.KEY
sa-update --import GPG.KEY


^^ Which I tried (re-importing the new key and re-running the cronjob command - no go:


[root@TSH root]# sa-update --import GPG.KEY
[root@TSH root]# /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE
Insecure dependency in eval while running with -T switch at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 1822.


Any ideas? Had a client email me about an increased amount of spam already - crazy impatient people! =)

[int]

A step back =/ In waiting for a reply, I started messing with it myself. What I did is that I opened the PerMsgStatus file and commented out the one line the error referred to (because after some searches, it appeared that one command wasn't recognized due to mod_perl having something turned on). Anyways - when I tried to re-run sa-update, it errored out (with compilation errors) and now, SpamAssassin won't start at all =/


[root@TSH root]# service spamassassin restart
Shutting down spamd: [FAILED]
Starting spamd: Variable "$uriRe" will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2103.
Variable "$schemeRE" will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2112.
Variable "$Addr_spec_re" will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2136.
Variable "$tldsRE" will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2140.
Missing right curly or square bracket at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2998, at end of line
syntax error at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2998, at EOF
Compilation failed in require at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 72.
BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 72.
Compilation failed in require at /usr/bin/spamd line 44.
BEGIN failed--compilation aborted at /usr/bin/spamd line 44.
[FAILED]


ANY help would be appreciated!

[IWorx-Paul]

Does changing the PerMsgStatus file back the way it was before you changed it do anything to get spamassassin starting again?

[int]

Does changing the PerMsgStatus file back the way it was before you changed it do anything to get spamassassin starting again?

EDIT: Ok I figured it out - looks like a brace bracket was removed. SpamAssassin service restarts now.

Now I just need to get sa-update to work like it used to before the Iworx update =) Insecure dependency in eval while running with -T switch...

[IWorx-Paul]

Ok. First thing I'd try would be to try installing the spamassassin rpm again.

Assuming the server is running centos 4,

rpm -Uvh --force http://updates.interworx.com/iworx/RPMS/cos4x/i386/spamassassin-3.1.9-100.rhe4x.iworx.i386.rpm

If spamassassin still won't start, you could try the previous spamassassin version rpm, here.

rpm -Uvh --force http://updates.interworx.com/iworx/RPMS/cos4x/legacy/i386/spamassassin-3.1.8-100.rhe4x.iworx.i386.rpm

[int]

Ok. First thing I'd try would be to try installing the spamassassin rpm again.

Assuming the server is running centos 4,

rpm -Uvh --force http://updates.interworx.com/iworx/RPMS/cos4x/i386/spamassassin-3.1.9-100.rhe4x.iworx.i386.rpm

If spamassassin still won't start, you could try the previous spamassassin version rpm, here.

rpm -Uvh --force http://updates.interworx.com/iworx/RPMS/cos4x/legacy/i386/spamassassin-3.1.8-100.rhe4x.iworx.i386.rpm

Thanks for the reply Paul, but I guess you posted that before seeing my EDIT? I fixed the compilation issue, but the sa-update issue remained. However, somehow, the problem fixed itself somehow today, because I came home, tried the sa-update command with the old gpg key and it worked --- sooo all is good on that front.

Thanks!

[Justec]

int, try "sa-update"!

Have a look at:
http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt

We have the following rulesets in the file:
/etc/mail/spamassassin/sare-sa-update-channels.txt

Each night we run:

/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart

We currently have a problem with the gpg key but I'm looking into that.

rgds
-tsl-

Couple questions...

- Is sa-update run at all by an InterWorx cron at all?
- Do I need to create the file /etc/mail/spamassassin/sare-sa-update-channels.txt or is this file supposed to be somewhere already and I add to it? (there is not one at that location)
- What does sa-update actually do? Does it just download the requested filters into /etc/mail/spamassassin directory?
- What is the difference in files in /usr/share/spamassassin and /etc/mail/spamassassin?

From what Im reading it seems like I would just need to do the following:
1) Create the file /etc/mail/spamassassin/sare-sa-update-channels.txt and put all the channels I want to get auto updates for.
2) Create /etc/mail/spamassassin/sa-update-keys in advance and chmod 700
3) Download the gpgkey and import the GPG (sa-update --import GPG.KEY)
4) Make sure Algorithm-Diff, Text-Diff, IO-Zlib, Archive-Tar packages are installed.
5) Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart

[tsl]

From what Im reading it seems like I would just need to do the following:
1) Create the file /etc/mail/spamassassin/sare-sa-update-channels.txt and put all the channels I want to get auto updates for.
2) Create /etc/mail/spamassassin/sa-update-keys in advance and chmod 700
3) Download the gpgkey and import the GPG (sa-update --import GPG.KEY)
4) Make sure Algorithm-Diff, Text-Diff, IO-Zlib, Archive-Tar packages are installed.
5) Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart

Yepp, thats correct. Nothing is there by default.
To have it run by cron each night, we create a script as /etc/cron.daily/sa-update which include:
/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.
txt --nogpg ; /sbin/service spamassassin restart
Currently still a problem with the gpgkey which I can't seem to solve, so we use the --nogpg flag at the moment

[Justec]

I got this setup now.

1) Create the file /etc/mail/spamassassin/sare-sa-update-channels.txt and put all the channels I want to get auto updates for.

2) Create /etc/mail/spamassassin/sa-update-keys in advance and chmod 700

3) Installed perl packages via YUM.
yum install perl-IO-Zlib
yum install perl-Archive-Tar
I did not have to install the other 2 packages which was nice b/c these to were an easy YUM install

4) Download the gpgkey and import the GPG (sa-update --import GPG.KEY)

5) Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A

#5 gave me an error just like Int got...
__________________
error: GPG validation failed!
The update downloaded successfully, but it was not signed with a trusted GPG key. Instead, it was signed with the following keys:

24F434CE

Perhaps you need to import the channel's GPG key? For example:

wget http://spamassassin.apache.org/updates/GPG.KEY
sa-update --import GPG.KEY

6) wget http://spamassassin.apache.org/updates/GPG.KEY
sa-update --import GPG.KEY

7) Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE

and then it worked fine.

Checking /var/lib/spamassassin I had all the files in there (which answered one of my other questions where do these filters get installed to)

[tsl]

Great :)
I'll try your solution for the key.

cheers
-tsl-

[pascal]

I got this setup now.

6) wget http://spamassassin.apache.org/updates/GPG.KEY
sa-update --import GPG.KEY

7) Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE

and then it worked fine.

Checking /var/lib/spamassassin I had all the files in there (which answered one of my other questions where do these filters get installed to)


Hi

I followed up your instrcutions but I still have

channel: GPG validation failed, channel failed
error: GPG validation failed!
The update downloaded successfully, but it was not signed with a trusted GPG
key. Instead, it was signed with the following keys:

856AA88A

Perhaps you need to import the channel's GPG key? For example:

wget http://spamassassin.apache.org/updates/GPG.KEY
sa-update --import GPG.KEY


I use /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A
Maybe it is because I use this list


updates.spamassassin.org
70_sare_adult.cf.sare.sa-update.dostech.net
72_sare_redirect_post3.0.0.cf.sare.sa-update.dostech.net
70_sare_evilnum0.cf.sare.sa-update.dostech.net
70_sare_evilnum1.cf.sare.sa-update.dostech.net
70_sare_evilnum2.cf.sare.sa-update.dostech.net
70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net
70_sare_html.cf.sare.sa-update.dostech.net
70_sare_html4.cf.sare.sa-update.dostech.net
70_sare_header.cf.sare.sa-update.dostech.net
70_sare_specific.cf.sare.sa-update.dostech.net
70_sare_adult.cf.sare.sa-update.dostech.net
72_sare_bml_post25x.cf.sare.sa-update.dostech.net
99_sare_fraud_post25x.cf.sare.sa-update.dostech.net
70_sare_spoof.cf.sare.sa-update.dostech.net
70_sare_random.cf.sare.sa-update.dostech.net
70_sare_oem.cf.sare.sa-update.dostech.net
70_sare_genlsubj.cf.sare.sa-update.dostech.net
70_sare_genlsubj4.cf.sare.sa-update.dostech.net
70_sare_highrisk.cf.sare.sa-update.dostech.net
70_sare_unsub.cf.sare.sa-update.dostech.net
70_sare_uri0.cf.sare.sa-update.dostech.net
70_sare_uri1.cf.sare.sa-update.dostech.net
70_sare_uri2.cf.sare.sa-update.dostech.net
70_sare_uri3.cf.sare.sa-update.dostech.net
70_sare_uri4.cf.sare.sa-update.dostech.net
70_sare_obfu.cf.sare.sa-update.dostech.net
70_sare_obfu2.cf.sare.sa-update.dostech.net
70_sare_obfu3.cf.sare.sa-update.dostech.net
70_sare_obfu4.cf.sare.sa-update.dostech.net
70_sare_stocks.cf.sare.sa-update.dostech.net



What is yours ?

Thanks Pascal

[pascal]

Hi

From what I know all the default "wide" rules are in /usr/share/spamassassin/

By default sa-update use this update-directory : /var/lib/spamassassin/[version]



Not sure the rules in /var/lib/spamassassin will be taken in account

Pascal

[Justec]

By default sa-update use this update-directory : /var/lib/spamassassin/[version]Yeah, this is where I found that shortly after posting my questions :)

I also believe is uses all 3 directortires (/var/lib/spamassassin/[version] AND /var/lib/spamassassin AND /etc/mail/spamassassin)

I use /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A
Pascal, after you update to the new key you need to change the key to the following/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE

I used the list provided by TSL here:
http://interworx.com/forums/showpost.php?p=11904&postcount=2

[pascal]

In fact it works with 856AA88A

I had to launch one time sa-u^date and then re-import the key and now it works

When I look the log (/var/log/maillog) after restarting spamassassin, i have these entries


Sep 5 11:22:08 clust01-carat01 spamd[1898]: prefork: child states: III
Sep 5 11:22:08 clust01-carat01 spamd[1898]: spamd: handled cleanup of child pid 6244 due to SIGCHLD
Sep 5 11:22:08 clust01-carat01 spamd[1898]: prefork: child states: II
Sep 5 11:43:13 clust01-carat01 spamd[1898]: spamd: server killed by SIGTERM, shutting down
Sep 5 11:43:14 clust01-carat01 spamd[11237]: logger: removing stderr method
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_SPEC_PROLEO_M2a has dependency 'MIME_QP_LONG_LINE' with a zero score
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency 'SARE_XMAIL_SUSP2'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency 'SARE_HEAD_XAUTH_WARN'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_HEAD_SUBJ_RAND has dependency 'X_AUTH_WARN_FAKED' with a zero score
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_HEAD_8BIT_NOSPM has undefined dependency '__SARE_HEAD_8BIT_DATE'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_HEAD_8BIT_NOSPM has undefined dependency '__SARE_HEAD_8BIT_RECV'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MULT_RATW_03 has undefined dependency '__SARE_MULT_RATW_03E'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_MKSHRT'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_GT'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_TINY'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG50'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG55'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG65'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG75'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG50'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG55'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG65'
Sep 5 11:43:16 clust01-carat01 spamd[11239]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG75'
Sep 5 11:43:17 clust01-carat01 spamd[11239]: spamd: server started on port 783/tcp (running version 3.1.9)


It looks like there is missing entries in local.cf or elsewhere for these new rules (70xx)

Do you have the same logs ?

Pascal

[Justec]

Pascal, if you downloaded and imported the new key from http://spamassassin.apache.org/updates/GPG.KEY I don't understand how 856AA88A still works.

Here is the log on my restart:
Sep 5 08:56:21 server1 spamd[7957]: spamd: server killed by SIGTERM, shutting down
Sep 5 08:56:26 server1 spamd[14124]: logger: removing stderr method
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_SPEC_PROLEO_M2a has dependency 'MIME_QP_LONG_LINE' with a zero score
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency 'SARE_XMAIL_SUSP2'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency 'SARE_HEAD_XAUTH_WARN'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_HEAD_SUBJ_RAND has dependency 'X_AUTH_WARN_FAKED' with a zero score
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_HEAD_8BIT_NOSPM has undefined dependency '__SARE_HEAD_8BIT_DATE'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_HEAD_8BIT_NOSPM has undefined dependency '__SARE_HEAD_8BIT_RECV'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MULT_RATW_03 has undefined dependency '__SARE_MULT_RATW_03E'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_MKSHRT'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_GT'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_TINY'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG50'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG55'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG65'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG40 has undefined dependency '__SARE_MSGID_LONG75'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG50'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG55'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG65'
Sep 5 08:56:28 server1 spamd[14128]: rules: meta test SARE_MSGID_LONG45 has undefined dependency '__SARE_MSGID_LONG75'
Sep 5 08:56:28 server1 spamd[14128]: spamd: server started on port 783/tcp (running version 3.1.9)
Sep 5 08:56:28 server1 spamd[14128]: spamd: server pid: 14128
Sep 5 08:56:28 server1 spamd[14128]: spamd: server successfully spawned child process, pid 14135
Sep 5 08:56:28 server1 spamd[14128]: spamd: server successfully spawned child process, pid 14136
Sep 5 08:56:28 server1 spamd[14128]: prefork: child states: II

[pascal]

So you have the same errors than me ;)

There is undefined dependencies. I think that Basicly it should means we have to define some variables somewhere

Pascal

[pascal]

I have corrected some of them.

1- Do a grep of meta test word (like SARE_HEAD_SUBJ_RAND for examle)
2- then find the missing dependencies in the file founded (for example /var/lib/spamassassin/3.001009/70_sare_header_cf_sare_sa-update_dostech_net/200510301100.cf)
3- finaly add a meta xxx 0 or change the test xith the good meta

Pascal

[pascal]

For example

in the file /var/lib/spamassassin/3.001009/70_sare_header_cf_sare_sa-update_dostech_net/200510301100.cf there is this test


header __SARE_HEAD_SUBJ_RAND Subject =~ /^(?:R[Ee]: )?(?:[a-z]{2,20}[\-\.\,]?\s?){1,8}/ # no /i!
meta SARE_HEAD_SUBJ_RAND (__SARE_HEAD_SUBJ_RAND && (SARE_XMAIL_SUSP2 || SARE_HEAD_XAUTH_WARN2 || X_AUTH_WARN_FAKED))
describe SARE_HEAD_SUBJ_RAND Subject is possibly random words
score SARE_HEAD_SUBJ_RAND 1.033


Anywhere else the "X_AUTH_WARN_FAKED" is defined but this rule test this meta data. So I have added at the begining of the file this :

meta X_AUTH_WARN_FAKED 0


This allow --lint to not complain

It should happens because we have loaded some rules that should need others ones

Pascal

[paulo]

Hi,

When running each night;

/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart

We're getting the error:
Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.5/i386-linux-thread-multi/Scalar/Util.pm line 30.
Shutting down spamd: [ OK ]
Starting spamd: [ OK ]


This start appening last week, because before it was running ok.

Any ideia what appened ? and how to solve it ?

Thanks

Paulo

[paulo]

It looks the update on the perl package 'perl-5.8.5-36.' broke something ... but only on CentOS 4 ... on CentOS 5 is running fine

any ideas ?

[paulo]

Ok... solved...

run:
# perl -MCPAN -e 'install "G/GB/GBARR/Scalar-List-Utils-1.18.tar.gz"'


finally solved .. :-)

[127.0.0.1]

If this will help, this worked on CentOs 5 with IWORX 3.0.3. I was getting the following when trying to run sa-update:

[root@host ~]# sa-update
Can't locate Archive/Tar.pm in @INC (@INC contains: /usr/lib/perl5/site_perl/5.8.8 /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.7/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.6/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/5.8.8) at /usr/bin/sa-update line 94.
BEGIN failed--compilation aborted at /usr/bin/sa-update line 94.


So...I simply did:

yum install perl-IO-Zlib
yum install perl-Archive-Tar

and retried sa-update and it succeeded. tail showed:

Dec 9 00:32:51 host spamd[4563]: spamd: server killed by SIGTERM, shutting down
Dec 9 00:32:52 host spamd[5534]: logger: removing stderr method
Dec 9 00:32:52 host spamd[5536]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
Dec 9 00:32:52 host spamd[5536]: spamd: server started on port 783/tcp (running version 3.1.9)
Dec 9 00:32:52 host spamd[5536]: spamd: server pid: 5536
Dec 9 00:32:52 host spamd[5536]: spamd: server successfully spawned child process, pid 5541
Dec 9 00:32:52 host spamd[5536]: spamd: server successfully spawned child process, pid 5542
Dec 9 00:32:52 host spamd[5536]: prefork: child states: II


I also uncommented the line in /etc/mail/spamassassin/v310.pre to allow DCC to get rid of the DCC complaint...

hope this helps,
home