> > Okay, I have MailScanner working with f-prot, and BOY is it catching all > > of those Swen.A virii! However, I can't seem to tell whether or not the > > Vipul's Razor that I installed yesterday is working. > > > > I'm running SpamAssassin 2.50, and it seems to be working fine. I've > > added 'use_razor2 1' to /etc/mail/spamassassin/local.cf and restarted. > > > > If I run razor-check against a spam that I've saved to a separate file, it > > is identified. However, if I put the message through the spamc client, > > while I get a bunch of other rules, it doesn't show any rule checks for > > razor. > > > > Any ideas would be appreciated! > > > > Ben > > A couple of items... > > 1. If you're using MailScanner then you don't need to run spamc/spamd. > MailScanner accesses SpamAssassin's libraries directly for increased > speed.
Okay, I'll make the change. I have been running SA with procmail for awhile, and just installed MS yesterday. But I'm alway interested in increasing speed. :) > 2. If you're running MailScanner and are using it to call SpamAssassin > then the SpamAssassin rules go in > /etc/MailScanner/spam.assassin.prefs.conf. This file is used instead of > /etc/mail/spamassassin/local.cf so any changes you make there aren't going > to take affect. Some people symbolic link local.cf to > spam.assassin.prefs.conf. > > 3. I don't believe it's necessary to add the rule to use razor in the > config files. It won't do any harm but it's the default. I don't know one way or the other, but I finally got a "RAZOR2" line in a spam a little while ago, so at least now I know it's working. :) > 4. SpamAssassin 2.50 is pretty old. You should upgrade it to 2.55. There > were several bugs fixes added and the spammers started customizing the > emails to get around the rules in 2.50. 2.55 is MUCH better. Ack. Well, I *had* installed the rpm for 2.44 at first, and then I was stupid and installed the perl version of 2.50 on top of that. I didn't want to mess with it again until RH 10 (or fedora 10 or whatever RH is becoming) comes out, but you've convinced me. I guess I'll take a couple of hours tonight and rpm -e the 2.44 version and uninstall the 2.50 version, and try to install the 2.55 version. Will I need to re-install MS in order for it to see the new SA, or will I just have to make those changes to the configuration file that you mentioned? > 5. If you include the X-MailScanner id's in the header you should change > the default. Some of the latest virii are faking these header lines to be > > X-MailScanner: found to be clean > > since some people were screen on these. Um...what should I change it to, and in what file? > > I suggest you make sure you're edited MailScanner.conf to tell it to use > SpamAssassin and turn on the spamassassin display. There are at least two > of these. One shows the rules that were triggered and the other shows the > actual numeric scores. If you want to see if razor is working then you > just need to turn on the rule hits (check the header of this message) > > If you really get into this then instal DCC and pyzor. SpamAssassin will > automatically use them too. Also, install ClamAV and turn it on inside of > MailScanner. It's a great open source virus scanner. MailScanner will > then scan all your emails with F-Prot and ClamAV. The idea is that if one > is a little slow in updating its virus files then other is likely picking > off the new variants! LOL....My server is just a dinky 866Mhz Celeron PIII! If I'm running razor, pyzor, DCC (whatever that is), f-prot and clam-av, won't my little processor overheat? ;) Ben -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
