On Sun, Sep 23, 2007 at 06:40:58PM -0400, Daniel D Jones wrote: > On Monday 24 September 2007 15:50:58 Andrew Sackville-West wrote: > > On Sun, Sep 23, 2007 at 03:36:45PM -0400, Daniel D Jones wrote: > > > SA should log to /var/log/mail.info, and that's a good place to look > > for info... > > I have two spamd entries in mail.info: > > Sep 24 14:51:09 etch spamd[10151]: spamd: connection from localhost > [127.0.0.1] at port 43270 > Sep 24 14:51:11 etch spamd[10151]: spamd: bad protocol: header error: > at /usr/sbin/spamd line 1671, <GEN4> line 1. > Sep 24 14:51:12 etch spamd[10150]: prefork: child states: II > > and > > Sep 24 15:26:20 etch spamd[10151]: spamd: connection from localhost > [127.0.0.1] at port 60337 > Sep 24 15:26:26 etch spamd[10151]: spamd: bad protocol: header error: ÿôÿý_ > at /usr/sbin/spamd line 1671, <GEN5> line 1. > Sep 24 15:26:26 etch spamd[10150]: prefork: child states: II > > If I'm interpreting this correctly, this was a couple of malformed messages > which caused spamd to choke. Apparently, then, spamd is being called and > passed the messages for examination. huh. I get copious output from spamd with every mail that hits it. How are you starting spamd? ps aux | grep spamd | grep -v grep ... > > I had that backwards. I thought nobody:true meant to only perform the actions > below when the check WAS true. So the colon signifies an OR, not an IF. essentially. ... > > I've reconfigured the file with your recommendations and restarted exim. I'm > still not getting any headers in any email, including obvious spam. Not sure > what's going on. Do you know of any way to verify that ACLs are actually > running? I really don't know other than to see them show up in the logs etc. Can you provide the pertinent part of exim4.conf? the entire ACL section would be good. A
Attachment:
signature.asc
Description: Digital signature