Errors spamassassin and pyzor

[CiViX]

I'm using the latest 4PSA Spam Guardian (sguardian300_build060712.08) with 4PSA's own spamassassin (spamassassin-3.1.3-1.i386.rpm) and the following packages from ART:
pyzor-0.4.0-5.rhel4.art.noarch.rpm
razor-agents-2.77-1.rhel4.art.i386.rpm
dcc-1.3.20-1.rhel4.art.i386.rpm

I'm running PLESK 8.0.1 on a RHEL4-server.

In the maillog I see some errors:

Jul 18 08:37:05 web imapd: /etc/courier-imap/shared/index: No such file or directory

and

Jul 18 04:22:39 web spamd[344]: config: failed to parse, now a plugin, skipping: ok_languages all 
Jul 18 04:22:39 web spamd[344]: config: failed to parse line, skipping: dcc_timeout 5 
Jul 18 04:22:39 web spamd[344]: config: failed to parse line, skipping: use_dcc 1

and

Jul 18 04:22:44 web spamd[344]: pyzor: check failed: internal error

Spamassassin is doing it's job and stopping most of the spam, but it doesn't seem to be using pyzor, and I'm unsure about razor and dcc...

Some googleing on the error "pyzor: check failed: internal error" recommends patching pyzor (/usr/lib/python2.3/site-packages/pyzor/client.py) with these patches:
http://antispam.imp.ch/08-opensource.html?lng=0
However, this didn't eliminate the pyzor-error.

Anyone know what the error-messages mean? How can I know if pyzor, razor and dcc is working? How can I fix the errors?

I'm also getting a lot of these:

Jul 18 04:23:25 web qmail: 1153189405.929017 warning: unable to stat mess/0/2843122
Jul 18 04:23:25 web qmail: 1153189405.929127 warning: unable to stat mess/0/2844295
Jul 18 04:23:25 web qmail: 1153189405.929159 warning: unable to stat mess/0/2841949
Jul 18 04:23:25 web qmail: 1153189405.929188 warning: unable to stat mess/0/2848987
Jul 18 04:23:25 web qmail: 1153189405.929214 warning: unable to stat mess/0/2844203

...but that might be related to something else... is this normal or is there something wrong?

 

[CiViX]

OK, I've done some more research and found that in spamassassin 3.1.x dcc, pyzor and razor are plugins and must be activated by editing the file:
/etc/mail/spamassassin/v310.pre

I uncommented the following:
loadplugin Mail::SpamAssassin:lugin:CC
loadplugin Mail::SpamAssassin:lugin::TextCat

(And yes, I have safecat-1.12-4psa.i386.rpm from http://www.4psa.com/software/ installed.)

After enabling the plugins the following error disappeared from maillog:
config: failed to parse, now a plugin, skipping: ok_languages all
web spamd[344]: config: failed to parse line, skipping: dcc_timeout 5
web spamd[344]: config: failed to parse line, skipping: use_dcc 1

Strange that Spam Guardian doesn't do this when the plugins are activated in PLESK/SpamGuadrian...

I also found that the error "imapd: /etc/courier-imap/shared/index: No such file or directory" doesn't matter and can be ignored (or eliminated by creating the file: touch /etc/courier-imap/shared/index).

I'm still having the pyzor-error and the "unable to stat mess"-errors... anyone?

 

[CiViX]

I ran spamassassin in debug-mode and found the following:

[12360] dbg: pyzor: got response: Traceback (most recent call last):\n File "/usr/bin/pyzor", line 4, in ?\n pyzor.client.run()\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 991, in run\n ExecCall().run()\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 195, in run\n if not apply(dispatch, (self, args)):\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 275, in check\n runner.run(server, (digest, server))\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 782, in run\n response = apply(self.routine, varargs, kwargs)\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 59, in check\n self.send(msg, address)\n File "/usr/lib/python2.3/site-packages/pyzor/client.py", line 73, in send\n self.socket.sendto(mac_msg_str, 0, address)\nsocket.error: (1, 'Operation not permitted')

And now I also found the solution: Port 24441 udp and tcp must be opened outbound in your firewall! As soon as I opened udp/tcp 24441 in my apf-firewall (egress) the error disappeared... Why don't 4PSA document this?!?!?!?

Razor and dcc also needs some open ports. Read more here:
http://wiki.apache.org/spamassassin/NetTestFirewallIssues

I also saw another error regarding SPF-checking:

[12367] dbg: spf: cannot load or create Mail::SPF::Query module: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: lib ../lib /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Plugin/SPF.pm line 286, <GEN5> line 221.

I fixed this by running cpan and doing a "install Mail::SPF::Query".

So now all seems to be working... wow, this has been a real conversation with myself...

However: Damn I'm good! ;-)