Question

我已经安装并配置并训练了我的spamassassin，所有似乎工作得很好。然后，当我尝试通过spamc部署它时，我得到了部分结果。

为什么会这样？

我喜欢spamc，因为我可以让它只输出报告，但似乎缺少支票：SPF，DKIM，BAYES。

我没有设法弄清楚或在网上找到任何类似的报道。这已经持续了好几天了，而且我没有想法。

spamassassin的作品：

# spamassassin -t < /path/to/spam.eml

Content analysis details:   (3.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 FSL_HELO_NON_FQDN_1    FSL_HELO_NON_FQDN_1
 0.7 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                            [score: 0.5000]
 0.5 MISSING_MID            Missing Message-Id: header
 0.0 HELO_NO_DOMAIN         Relay reports its domain incorrectly
 1.4 MISSING_DATE           Missing Date: header

spamc only partial：

# spamc -R  < /path/to/spam.eml

Content analysis details:   (1.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 FSL_HELO_NON_FQDN_1    FSL_HELO_NON_FQDN_1
 0.1 MISSING_MID            Missing Message-Id: header
 0.0 HELO_NO_DOMAIN         Relay reports its domain incorrectly
 1.4 MISSING_DATE           Missing Date: header

Answer 1

我认为同样的问题。

以下是您的问题的答案：http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html#filename

bayes数据库保存在运行spamassassin的用户的主目录中：

bayes_path /path/filename   (default: ~/.spamassassin/bayes)
This is the directory and filename for Bayes databases. Several databases will be created, with this as the base directory and filename, with _toks, _seen, etc. appended to the base. The default setting results in files called ~/.spamassassin/bayes_seen, ~/.spamassassin/bayes_toks, etc.

By default, each user has their own in their ~/.spamassassin directory with mode 0700/0600. For system-wide SpamAssassin use, you may want to reduce disk space usage by sharing this across all users. However, Bayes appears to be more effective with individual user databases.

以下是适合我的解决方案：

根据这个wiki：http://wiki.apache.org/spamassassin/SiteWideBayesSetup，我在/etc/mail/spamassassin/local.cf中添加了以下两行：

bayes_path /var/spamassassin/bayes_db/bayes
bayes_file_mode 0777

我创建了所需的目录： / var / spamassassin / bayes_db /

请注意最后一个＆＃34;贝叶斯＆＃34;在路径中是数据库文件的前缀（bayes_journal，bayes_seen等）

好吧，在我恢复spamassassin后，没有任何事情发生。没有贝叶斯测试。嗯...

所以，我将已创建的数据库从 /root/.spamassassin / * 复制到 / var / spamassassin / bayes_db

更新：我似乎必须将这4个 bayes _ * 文件的权限更改为0666.否则，自动学习者不会保存新数据。我不同意0666的许可，但我希望我很快就会找到另一种解决方案。

我在垃圾邮件中运行了另一个测试...我得到了贝叶斯！：）

spamassassin的结果

# spamassassin -t -D spf,dkim < /path/to/spam.eml

Content analysis details:   (8.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                            [score: 1.0000]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?141.146.5.61>]
 1.0 DATE_IN_PAST_12_24     Date: is 12 to 24 hours before Received: date
-0.0 SPF_PASS               SPF: sender matches SPF record
 1.3 TRACKER_ID             BODY: Incorporates a tracking ID number
 0.2 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                            [score: 1.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

spamc的结果：

# spamc -R  < /path/to/spam.eml

Content analysis details:   (8.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?141.146.5.61>]
 3.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                            [score: 1.0000]
 1.0 DATE_IN_PAST_12_24     Date: is 12 to 24 hours before Received: date
-0.0 SPF_PASS               SPF: sender matches SPF record
 1.3 TRACKER_ID             BODY: Incorporates a tracking ID number
 0.2 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                            [score: 1.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

Content analysis details:   (8.2 points, 5.0 required)

Answer 2

如果spamd在专用用户帐户下运行，它将使用该用户找到的首选项，并且您还可能存在一些访问权限问题（例如，该用户不允许读取站点范围的Bayes数据库）。

您还可以为spamd提供影响其他行为的选项（例如，禁用DNS和网络测试的-L）。

你是如何运行垃圾邮件的？你也可以用-D运行spamd，看看是否有任何有趣的东西弹出来。

spamassassin和spamc的结果不同

2 个答案: