MESpamC - MailEnable SpamAssassin Client [v 0.3.1 / 0.2.5]

Discussion, support and announcements for third party applications that work with MailEnable.
Post Reply
Zento
Posts: 11
Joined: Tue Nov 07, 2006 12:17 pm

Re: ...

Post by Zento » Tue Nov 07, 2006 4:21 pm

someone_else wrote:My advice (again, and always) is to run the SpamAssassin server under Linux, be that a real or virtual server. If anyone wants a preconfigured VMWare SpamAssassin virtual server image, send me a PM, and I'll give you a link to one.
I first tried the Win32 version for simplicity, but seems that is time to try a virtual server.

keithc
Posts: 23
Joined: Tue Jun 20, 2006 3:05 pm

Post by keithc » Tue Nov 07, 2006 5:29 pm

Has anyone attempted to do any useful reporting on top of MESpamC and spamd?

I've looked at various options that could use the spamd.log file, but there's not a whole lot of info there besides the spam scores.

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

MESpamC 0.3.0

Post by someone_else » Tue Nov 07, 2006 8:54 pm

MESpamC 0.3.0 is now available.


changes in this version:
- added: graphical setup utility
- added: option to SkipSAOnForwards
- added: special post-SA actions on forwarded messages
- added: options to redirect/resend messages
- fixed: bug with long lines causing errors
- fixed: bug with spamdIO
- changed: spamdIO logging scheme



notes:

- besides configuring MESpamC, the new graphical setup utility can also be used to test SpamAssassin connections, as well as to check for updates to MESpamC

- starting with this version, MESpamC will be distributed under a dual-license, similar to that of DKeyEvent
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

olig
Posts: 4
Joined: Sat Nov 11, 2006 1:25 pm

MeSpamC - Configuration unsuccesfull

Post by olig » Sat Nov 11, 2006 1:29 pm

I setup Win32 SpamD and MeSPamC but messages don't seem to be flagged by SpamAssassin.

I know that SpamD is working, because if I try it with the spamC client headers are added to the message (i.e. spamc.exe < file-input > file-output)

I tried to configure MeSpamC as a pickup event and MeSpamcmde as a filter action, same result with both. I know that SpamD gets called because I see entries in the log.

Code: Select all

Fri Nov 10 18:06:52 2006 [2892] info: spamd: connection from CL-T014-180CN [127.0.0.1] at port 2587
Fri Nov 10 18:06:52 2006 [2892] warn: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody at spamd.raw line 1198, <GEN23> line 3.
Fri Nov 10 18:06:52 2006 [2892] info: spamd: processing message <000001c7051c$bfdbe170$9e84a8c0@kajy> for (unknown):0
Fri Nov 10 18:07:08 2006 [2892] info: spamd: identified spam (12.1/6.3) for (unknown):0 in 16.5 seconds, 1797 bytes.
Fri Nov 10 18:07:08 2006 [2892] info: spamd: result: Y 12 - HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_PSBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL scantime=16.5,size=1797,user=(unknown),uid=0,required_score=6.3,rhost=CL-T014-180CN,raddr=127.0.0.1,rport=2587,mid=<000001c7051c$bfdbe170$9e84a8c0@kajy>,autolearn=spam
However I get some error in the mespamc.log

Code: Select all

2006/11/10 18:07:05 connection to spamd host 127.0.0.1 timed out while waiting for the message to be processed
2006/11/10 18:07:05 communication with spamd host 127.0.0.1 did not complete successfully
2006/11/10 18:07:08 connection to spamd host 127.0.0.1 timed out while waiting for the message to be processed
2006/11/10 18:07:08 communication with spamd host 127.0.0.1 did not complete successfully
2006/11/10 18:07:09 connection to spamd host 127.0.0.1 timed out while waiting for the message to be processed
2006/11/10 18:07:09 communication with spamd host 127.0.0.1 did not complete successfully
And also some errors in the event log

Code: Select all

MESpamC terminated due to an exception. EInOutError Invalid filename
Message: monimap.com
I don't know what else to check to identify the source of the problem, I tried different configuration without results. Anyone has an idea?

olig
Posts: 4
Joined: Sat Nov 11, 2006 1:25 pm

Re: MeSpamC - Configuration unsuccesfull

Post by olig » Sat Nov 11, 2006 3:26 pm

olig wrote: I don't know what else to check to identify the source of the problem, I tried different configuration without results. Anyone has an idea?
Turns out it seemed to be related with the windows 2003 firewall. I turned it off and it works. If I start SpamD with -L, messages are processed in less than 1 second and it works well. However, if don't put the switch messages are processed in around 20 seconds (which I think is normal) but MeSpamC seems to get timeouts, however the timeout limit in MeSpamC is 50 seconds

Now I have problems moving messages in a subfolder. What should I write for the config MoveToFolder. Now I have MoveToFolder=SPAM and I keep getting these error in MeSpamC.log

Code: Select all

2006/11/11 10:22:20 could not move 15088158FC314265B2A0DA434B2BB4E1.MAI to SPAM\
Olivier

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

Re: MeSpamC - Configuration unsuccesfull

Post by someone_else » Sat Nov 11, 2006 3:32 pm

olig wrote:Now I have problems moving messages in a subfolder. What should I write for the config MoveToFolder. Now I have MoveToFolder=SPAM
Please take a moment to read the documentation (it's not that large a document, really). Therein, under 'Configuring MESpamC', you will find that it says:
For 'on redirect Move to' the value must be an absolute path...
That means you have to put in something like: C:\Quarantine
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

olig
Posts: 4
Joined: Sat Nov 11, 2006 1:25 pm

Re: MeSpamC - Configuration unsuccesfull

Post by olig » Sat Nov 11, 2006 3:40 pm

someone_else wrote: For 'on redirect Move to' the value must be an absolute path...
That means you have to put in something like: C:\Quarantine
Sorry, I missed that one, I think I was looking at an old version of the help file. In this case it would move all SPAM for every users to a unique folder. I was thinking about moving it to a subfolder of the mailbox. I guess if I want to do that I would have to configure a mailbox filter.

Any idea about the timeout problem if I enable DCC and Razor check in SA?

Thanks for your fast answer.

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

...

Post by someone_else » Sat Nov 11, 2006 3:44 pm

Like I have already said numerous times (see the previous page for examples) the win32 builds of SA are quite unreliable, and not recommended. They are unreliable, and messages tend to take a long time to be parsed, which often causes timeout issues with MESpamC. You should really consider using a Linux SpamAssassin server (be it real or virtual).
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

stats

Post by someone_else » Sun Nov 12, 2006 9:35 am

keithc wrote:Has anyone attempted to do any useful reporting on top of MESpamC and spamd?

I've looked at various options that could use the spamd.log file, but there's not a whole lot of info there besides the spam scores.

Various statistics and graphs can be obtained by using third-party tools and scripts for SpamAssassin. See, for example, Statistics and log analyzers in the SpamAssassin wiki.
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

burningice
Posts: 11
Joined: Fri Apr 07, 2006 2:31 pm

Re: debugging

Post by burningice » Tue Nov 14, 2006 7:45 pm

someone_else wrote:Do you have spamdIO logging enabled? if so, disable that and see if the error persists.
I've tried to disable all form for logging, but the problem exists.
someone_else wrote:If it does, then try and see if the error is raised on all messages or just some; if it is the latter, then try and see if there is some common pattern to messages which are causing errors.
The error seems to be raised on every message that comes into the system.

I've tried to install your newest version of SpamC, 0.3, but the problems persists:

Application popup: mespamc.exe - Application Error : The instruction at "0x00e22acf" referenced memory at "0x00f94ff8". The memory could not be "read".

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

debugging

Post by someone_else » Tue Nov 14, 2006 9:23 pm

Well, if you want to debug, send me your mespamc.ini file by email, and we'll take it from there...
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

jgrant07
Posts: 14
Joined: Sat Apr 29, 2006 7:03 am

Post by jgrant07 » Wed Nov 15, 2006 3:57 am

Hi guys,

I have a 2003 server running vmware server with a linux virtual server for my spamassassin. Everything seems to be working like a charm, but recently we have had alot of emails being tagged as spam going out of our email server, i.e. legitimate emails being sent from our domains.

I have attached a copy of my mespamc.ini file and a copy of the email headers. I have SkipSAIfSenderHasAuthenticated=1 and in the header it shows that, but it still tags it as spam.
Thanks
Jared

==========
Mespamcmd.ini

;MESpamC - MailEnable SpamAssassin Client
;author: someone_else@exhalus.net


[SpamD]
Hosts=71.41.xxx.xxx
Port=783
Timeout=90
Failover=0
PassMEUsername=0
AllowMessagesToBeTruncated=0
LogCommunication=0


[MESpamC]
MaxFileSizeToCheck=256
IgnoreCatchallAddresses=0
CheckOutgoingMessages=0
CheckLocalMessages=0
SkipProcessingIfSenderHasAuthenticated=1
SkipProcessingForTheseDomains=
SkipProcessingForTheseSenders=
LogCriticalErrorsToEventLog=1
LogNonFatalErrors=1
SuppressFileNotFoundErrors=0
AddHeaderWithMESpamCStatus=1


[Content-Filtering-PreSA]
; [0 - Do Nothing] [1 - Delete] [2 - Move] [3 - Skip SpamAssassin]
MoveToFolder=C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\grant-consulting.com\MAILROOT\spam\Inbox
ResendToAddress=
MissingFromHeader=0
EmptyBody=0
DeleteIfHeaderContains=
MoveIfHeaderContains=
SkipSAIfHeaderContains=
DeleteIfBodyContains=
MoveIfBodyContains=
SkipSAIfBodyContains=
SkipSAForTheseSenders=
SkipSAForTheseDomains=martellaclark.com,affinityinc.com,dell.com
SkipSAOnForwards=0
SkipSAIfSenderHasAuthenticated=1


[Content-Filtering-PostSA]
; [0 - Do Nothing] [1 - Delete] [2 - Move]
X-Spam-Status-Yes=2
;AddHeaderBasedOnSpamScoreThresholds=5,9,15
DeleteIfSpamScoreIsHigherThan=
MoveIfSpamScoreIsHigherThan=5.0
DeleteFwdIfSpamScoreIsHigherThan=
MoveFwdIfSpamScoreIsHigherThan=5.0
DeleteIfHeaderContains=
MoveIfHeaderContains=
AddHeaderBasedOnSpamScoreThresholds=


=================================
Email Header:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
fedora.grant-consulting.com
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.2 required=5.0 tests=MIME_BOUND_NEXTPART,
MISSING_MIMEOLE,PRIORITY_NO_NAME,RCVD_IN_SORBS_DUL,RCVD_NUMERIC_HELO,
SUBJ_ALL_CAPS autolearn=no version=3.1.0
X-Spam-Report:
* 1.2 SUBJ_ALL_CAPS Subject is all capitals
* 1.3 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
* [71.195.xxx.xxx listed in dnsbl.sorbs.net]
* 2.2 PRIORITY_NO_NAME Message has priority, but no user agent name
* 1.4 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
* 0.2 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
X-MESpamC: skipped (authenticated sender)

michelkenny
Posts: 42
Joined: Mon Sep 11, 2006 7:36 pm

Post by michelkenny » Wed Nov 15, 2006 4:34 am

Hey someone_else, just to let you know that I installed your plugin and it works like a charm! I have a Windows 2003 Server running a CentOS 4.4 virtual machine with the latest SpamAssassin. It looks like it is catching a lot of spam!

someone_else
Posts: 302
Joined: Tue Jul 19, 2005 1:12 pm
Location: 404

...

Post by someone_else » Wed Nov 15, 2006 10:08 am

jgrant07 wrote:Everything seems to be working like a charm, but recently we have had alot of emails being tagged as spam going out of our email server, i.e. legitimate emails being sent from our domains. I have attached a copy of my mespamc.ini file and a copy of the email headers. I have SkipSAIfSenderHasAuthenticated=1 and in the header it shows that, but it still tags it as spam.
It's difficult to say without being able to see the complete message headers, but judging from the snippet you sent, it seems as though MESpamC was run and it correctly skipped the message; then, SpamAssassin was run again over that, but not by MESpamC (as it does not have another 'X-MESpamC' header at the top). Note that the 'X-MESpamC' should always be at the top of the message; any headers on top of it have been added after MESpamC finished execution.
MailEnable plugins:
DKeyEvent - DomainKeys/DKIM
MESpamC - SpamAssassin integration

jgrant07
Posts: 14
Joined: Sat Apr 29, 2006 7:03 am

Post by jgrant07 » Thu Nov 16, 2006 1:31 am

Well for some reason, it now shows the skipped status at the top of every outbound header:

X-MESpamC: skipped (authenticated sender)
Received: from dell ([71.195.158.198]) by grant-consulting.com with MailEnable ESMTP; Wed, 15 Nov 2006 19:28:39 -0600
From: "Jared Grant" <nospam@grant-consulting.com>
To: "'Jared Grant'" <nospam@grant-consulting.com>
Subject: test
Date: Wed, 15 Nov 2006 19:28:41 -0600
Message-ID: <004801c7091e$8da79ef0$a8f6dcd0$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0049_01C708EC.430D2EF0"
X-Mailer: Microsoft Office Outlook 12.0
thread-index: AccJHox7eJ+NoqXVRjmPkeBaEtPaIw==
Content-Language: en-us
Return-Path: <nospam@grant-consulting.com>

=========================================

I really don't know why it's working now, but it is, so I'm cool with that.

Thanks for the help.

Post Reply