Spamassassin Woes - Please Help

[Brian]

I install SA as per http://www.directadmin.com/forum/showthread.php?s=&threadid=1193&highlight=spamassasin

When trying to send a mail via squirrelmail or outlook to another account on the same machine i get returned mail saying....................

An error was detected while processing a file of BSMTP input.
The error message was:

421 Lost incoming connection

The SMTP transaction started in line 0.
The error was detected in line 3.
0 previous messages were successfully processed.
The rest of the batch was abandoned.
421 Lost incoming connection
Transaction started in line 0
Error detected in line 3

Any ideas????

[existenz]

See you can send mail from a externial mail server to your box.

Check

/var/log/maillog &
/var/log/exim/exim_*

[Brian]

Hmm external mail used to work but when i tried to send a mail from hotmail to account on machine it didn't arrive but i didn't get a message failed email either????

I can send mail out of the machine

Exim Log

==> /var/log/exim/exim_mainlog <==
2004-02-24 09:39:07 1AvZ1t-0004NI-Sq => whatever@hotmail.com R=lookuphost T=remote_smtp H=mx3.hotmail.com [65.54.167.5]
2004-02-24 09:39:07 1AvZ1t-0004NI-Sq Completed
2004-02-24 09:39:40 1AvZ2S-0004NO-IU <= whatever@hotmail.com H=(hotmail.com) [64.4.11.69] P=esmtp S=1135 id=BAY7-F69LN9SUEEmrYT00002a0d@hotmail.com
2004-02-24 09:39:40 SMTP connection from mail lost while reading message data (header)
2004-02-24 09:39:40 1AvZ2S-0004NO-IU <user@domain.com>: spamcheck transport output: An error was detected while processing a file of BSMTP input.
2004-02-24 09:39:40 1AvZ2S-0004NO-IU ** user@domain.com R=spamcheck_director T=spamcheck: Child process of spamcheck transport returned 2 from command: /usr/sbin/exim
2004-02-24 09:39:40 1AvZ2S-0004NV-Rq <= <> R=1AvZ2S-0004NO-IU U=mail P=local S=2417
2004-02-24 09:39:40 1AvZ2S-0004NO-IU Completed
2004-02-24 09:39:42 1AvZ2S-0004NV-Rq => whatever@hotmail.com R=lookuphost T=remote_smtp H=mx2.hotmail.com [65.54.190.7]
2004-02-24 09:39:42 1AvZ2S-0004NV-Rq Completed

==> /var/log/exim/exim_paniclog <==
2004-02-23 03:01:56 1Av6M0-00026S-Ou User 0 set for local_delivery transport is on the never_users list
2004-02-23 03:01:57 1Av6M0-00026j-VM User 0 set for local_delivery transport is on the never_users list
2004-02-23 03:01:57 1Av6M1-00027F-F3 User 0 set for local_delivery transport is on the never_users list
2004-02-23 03:01:57 1Av6M1-00027I-J7 User 0 set for local_delivery transport is on the never_users list
2004-02-24 00:05:01 1AvQ4K-0003d4-LW User 0 set for local_delivery transport is on the never_users list
2004-02-24 00:05:01 1AvQ4L-0003d8-Ep User 0 set for local_delivery transport is on the never_users list
2004-02-24 03:01:50 1AvSpS-0003u9-Gu User 0 set for local_delivery transport is on the never_users list
2004-02-24 03:01:50 1AvSpS-0003uP-ND User 0 set for local_delivery transport is on the never_users list
2004-02-24 03:01:51 1AvSpT-0003uy-91 User 0 set for local_delivery transport is on the never_users list
2004-02-24 03:01:51 1AvSpT-0003v2-II User 0 set for local_delivery transport is on the never_users list

==> /var/log/exim/exim_rejectlog <==
2004-02-19 02:32:42 SMTP protocol violation: synchronization error (input sent without waiting for greeting): rejected connection from H=[ip address]
2004-02-19 07:35:17 SMTP call from (domain.com) [81.130.105.172] dropped: too many nonmail commands (last was "NOOP")
2004-02-19 12:16:48 H=(winxp) [61.73.48.64] F=<china9988@21cn.com> rejected RCPT <china9988@21cn.com>: authentication required
2004-02-20 02:18:51 SMTP protocol violation: synchronization error (input sent without waiting for greeting): rejected connection from H=[ip address]
2004-02-21 02:33:49 SMTP protocol violation: synchronization error (input sent without waiting for greeting): rejected connection from H=[ip address]
2004-02-21 05:16:26 H=(194.159.247.46) [219.91.108.96] F=<12hello@msa.hinet.net> rejected RCPT <kingoffice@so-net.net.tw>: authentication required
2004-02-21 06:47:35 SMTP protocol violation: synchronization error (input sent without waiting for greeting): rejected connection from H=[216.34.38.66]
2004-02-22 14:33:30 H=(your-ykj3fdh0wj) [220.71.86.94] F=<china9988@21cn.com> rejected RCPT <china9988@21cn.com>: authentication required
2004-02-23 00:15:58 H=(Post.cz) [12.65.168.112] F=<dkjbkjsb@iol.it> rejected RCPT <smtps1@cox.net>: authentication required
2004-02-24 02:31:40 SMTP protocol violation: synchronization error (next input sent too soon): rejected "RCPT TO:<user@domain.com>" H=(niiallisha) [24.15.131.107]

[Brian]

I commented out the spamassassin lines in exim.conf and everything now works as it should (including local delivery)

Any ideas on what could be going wrong?

[DirectAdmin Support]

Hello,

Try running:

/usr/bin/spamd &

John

[Brian]

Tried and get the following

Can't locate HTML/Parser.pm in @INC (@INC contains: ../lib /usr/local/lib/perl5/site_perl/5.8.0 /usr/local/lib/perl5/site_perl/5.8.0/mach /usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.8.0/BSDPAN /usr/local/lib/perl5/5.8.0/mach /usr/local/lib/perl5/5.8.0 .) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/HTML.pm line 7.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/HTML.pm line 7.
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 44.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 44.
Compilation failed in require at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 62.
BEGIN failed--compilation aborted at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 62.
Compilation failed in require at /usr/local/bin/spamd line 32.
BEGIN failed--compilation aborted at /usr/local/bin/spamd line 32.

[DirectAdmin Support]

Hello,

It would seem you're missing the HTML::Parser module.. can be found here:

http://search.cpan.org/CPAN/authors/id/G/GA/GAAS/HTML-Parser-3.35.tar.gz



wget http://search.cpan.org/CPAN/authors/id/G/GA/GAAS/HTML-Parser-3.35.tar.gz
tar xvzf HTML-Parser-3.35.tar.gz
cd HTML-Parser-3.35
perl Makefile.PL
make
make installThat should get you up and going.

John

[Brian]

OK did that and all installed ok, uncomment the spamd lines from exim.conf again and restarted

did ps aux | grep spamd which returned nothing.

Tried sending a mail from outside account and got

421 Lost incoming connection

The SMTP transaction started in line 0.
The error was detected in line 3.
0 previous messages were successfully processed.
The rest of the batch was abandoned.
421 Lost incoming connection
Transaction started in line 0
Error detected in line 3

again :(

[DirectAdmin Support]

Hello,

did you rerun the spamd program?
What does the /var/log/exim/mainlog show?

John

[Brian]

Did

cryo#spamd &
[1] 58963
cryo# Could not create INET socket: Address already in use IO::Socket::INET: Address already in use

--------------------

cryo# tail exim_mainlog
2004-03-01 14:17:20 1AxmMK-000FCQ-HM == diradmin@cryo.dribble.me.uk routing defer (-51): retry time not reached
2004-03-01 14:17:20 1AwlXA-000A1L-NM == mail@yhaolme.com routing defer (-51): retry time not reached
2004-03-01 14:17:20 1Axero-000EhL-0z == diradmin@cryo.dribble.me.uk routing defer (-51): retry time not reached
2004-03-01 14:17:20 1Awvex-000Amh-2z == admin@cryo.connecthosting.com routing defer (-51): retry time not reached
2004-03-01 14:17:20 1AxI8V-000D6w-1g == admin@cryo.connecthosting.com routing defer (-51): retry time not reached
2004-03-01 14:17:20 1AxUB1-000Dta-Ay Message is frozen
2004-03-01 14:17:20 1AxfWF-000Ejz-SZ Message is frozen
2004-03-01 14:17:20 1Axo9k-000FK5-LY Message is frozen
2004-03-01 14:17:20 End queue run: pid=58926

[ProWebUK]

Try rebooting the system... ugly fix but it should do the trick.

Chris

[Brian]

OK still battling with this, restarted system, uncomment lines in exim.conf, started spamd which started properly this time

root 12150 0.0 5.8 15848 14972 p0 I 11:40AM 0:04.86 /usr/local/bin/perl /usr/local/bin/spamd

exim mainlog

2004-04-20 13:07:13 1BFu1x-0003Li-3P <= support@blah.co.uk H=(desk) [ip address] P=smtp S=1322 id=005301c426d0$80e8a5c0$ebf49fc2@switch
2004-04-20 13:07:13 SMTP connection from mail lost while reading message data (header)
2004-04-20 13:07:13 1BFu1x-0003Li-3P <brian@domain.co.uk>: spamcheck transport output: An error was detected while processing a file of BSMTP input.
2004-04-20 13:07:13 1BFu1x-0003Li-3P ** brian@domain.co.uk R=spamcheck_director T=spamcheck: Child process of spamcheck transport returned 2 from command: /usr/sbin/exim
2004-04-20 13:07:13 1BFu1x-0003Lp-BT <= <> R=1BFu1x-0003Li-3P U=mail P=local S=2616
2004-04-20 13:07:13 1BFu1x-0003Li-3P Completed
2004-04-20 13:07:13 1BFu1x-0003Lp-BT => brian <support@blah.co.uk> R=localuser T=local_delivery
2004-04-20 13:07:13 1BFu1x-0003Lp-BT Completed

Please help :(

---------------------------

Update...........

Foun this http://www.directadmin.com/forum/showthread.php?s=&threadid=2406&highlight=spamassassin and made the changes as per the last post in the topic.

Tried to send a mail internally and got..........

2004-04-20 16:19:32 SMTP connection from mail lost while reading message data (header)
2004-04-20 16:19:32 1BFx22-0003fh-K7 <brian@domain.com>: spamcheck transport output: An error was detected while processing a file of BSMTP input.
2004-04-20 16:19:32 1BFx22-0003fh-K7 == brian@domain.com R=spamcheck_director T=spamcheck defer (-24): Filter process failure

Also can't recieve mails from hotmail etc. I can send emails fine

Will this circle of madness never end :mad:

[DirectAdmin Support]

Child process of spamcheck transport returned 2 from command: /usr/sbin/eximI remember getting that when the spamd (or spamc) programs were broken (can't remember exactly what it was) .. might have been the spamd not running, but it was quite some time ago.

John

[edzelf]

Although this is an old topic, I have run into the same problem (for 2 users) after transferring all sites to a new server.

I found out that it had something to do with the administration of spamassassin in /home/<user>/.spamassassin. If there is a file called "bayes.lock" in this directory, you're in trouble.

The simple solution is to switch off spammassassin for this user in the controlpanel, delete all the files in /home/<user>/.spammassassin and switch spamassassin back on.