[bustthis]

it’s been awhile since i was using amavisd without procmail… just out of curosity, does amavisd add the X-Spam-Checker-Version header? this is what is throwing me off 🙂

i have searched the amavisd mail list and only see settings for v. 2.0

thanks,

charles

[bustthis]

this is very similar to the error messages i was getting when clicking on
filters! i’m not sure what issues i have with imap or squirelmail because they
both work! i changed my imap server in squirelmail 3 times and kept getting
errors, although i could still send and receive mail?

[bustthis]

so i followed your instructions and no dice!

unable to open LA file: /usr/lib/sasl2/pwauxprop.la – changing permissions
to root:wheel got rid of this error.

go to squirrellmail-filters – fsockopen(): php_hostconnect- unable to connect
to imap server:2000 line – avelsieve/sieve-php.lib.php line 366

any ideas?

[bustthis]

is seive a replacement for procmail? i’ve been trying to bail on procmail,
mostly to try seive out… since i "broke" spamassassin after using procmail, i
am just wondering what benifits there are from using your seive installers? or
is it just for vacation messages?

[bustthis]

i’m not sure why it’s not working, if i take out the procmail lines in main.cf and master.cf, amavisd lines are in both files.

looking at my logs, amavisd and spamassassin scan my mail –
i see spam_scan: hits= and SA check:, etc… but in mail.app it’s not adding the spamassassin headers anymore… it was with procmail and i haven’t changed anything. spamassassin -D –lint tells me it’s reading from /etc/mail/spamassassin/local.cf and allowing my users_prefs in my users directories. is this something in the amavisd.conf i’m missing?

sorry to waste your time 🙁

[bustthis]

i’ve not changed anything, does this look right?

smtp-amavis unix – – y – 2 smtp
-o smtp_data_done_timeout=1200
-o disable_dns_lookups=yes
127.0.0.1:10025 inet n – y – – smtpd
-o content_filter=
-o local_recipient_maps=
-o smtpd_helo_restrictions=
-o smtpd_client_restrictions=
-o smtpd_sender_restrictions=
-o mynetworks=127.0.0.0/8

hmm, even reloaded spamassassin… damn that procmail!!!!

maybe i will start over, are there any advantages to using the new amavisd in your new article? i am currently using amavisd-new-20030616 and clamav 0.75

[bustthis]

i am using amavisd + clamav + spamassassin… i followed your article awhile back and somehow got mixed up with procmail. i followed davids article on setting up procmail and cyrus. i now want to take procmail out of the mix, i can’t remember exactly what else i did and was hoping someone can help me. i took out the procmail transports in my postfix files, but spamassassin isn’t scanning my mail.

[bustthis]

this is what works for me:

#!/bin/sh

. /etc/rc.common

StartService ()
{
ConsoleMessage “Starting Amavis anti-virus/spam daemon.”
if [ ! -d /var/run/clamav ] ; then
mkdir /var/run/clamav
fi
chown clamav /var/run/clamav
su clamav -c /usr/local/sbin/clamd
/usr/bin/su clamav -c amavisd
/usr/local/bin/freshclam -d -c 6 -l /var/log/clam-update.log
}

StopService ()
{
ConsoleMessage “Stopping Amavis anti-virus/spam daemon.”
kill -1 `cat /var/amavis/amavisd.pid`
killall freshclam
killall clamd
}

RestartService ()
{
StopService
StartService
}

RunService “$1”

StartupParameters.plist:

{
Description = “Amavis anti-virus/spam-control daemon”;
Provides = (“AV-Spam”);
Requires = (“Resolver”);
Uses = (“Network Time”, “NFS”);
Preference = “None”;
Messages =
{
start = “Starting Amavis”;
stop = “Stopping Amavis”;
restart = “Restarting Amavis”;
};
}

permissions:
-rwxr-xr-x 1 root wheel 860 11 Jun 23:12 Amavis
-rw-r–r– 1 root wheel 315 11 Jun 23:12 StartupParameters.plist

you might want to take out the clam lines.

[bustthis]

i do get a server hostname like server.mydomain.com, i just put mydomain.com, for the example.

[bustthis]

okay, here is a example of when i am issued 3 tickets for imap…

Kerberos 5 ticket cache: ‘API:Initial default ccache’
Default Principal: [email protected]
Valid Starting Expires Service Principal
07/01/04 15:04:56 07/02/04 01:04:54 krbtgt/[email protected]
renew until 07/08/04 15:04:54
07/01/04 15:04:54 07/02/04 01:04:52 afpserver/[email protected]
renew until 07/08/04 15:04:52
07/01/04 15:05:45 07/02/04 01:04:52 imap/[email protected]
renew until 07/08/04 15:04:52
07/01/04 15:05:45 07/02/04 01:04:52 imap/[email protected]
renew until 07/08/04 15:04:52
07/01/04 15:05:45 07/02/04 01:04:52 imap/[email protected]
renew until 07/08/04 15:04:52

i noticed last nite, that one of my network users was issued 2 krbtgt and 2 afp tickets upon logging in, other than that, i haven’t seen anything that helps me figure out this problem.

[bustthis]

i’m sorry, that was from the server… i see the problem with the client i use everyday, so here it is from the client:
[workstation1:~] charlesx% sudo klist
Password:
Kerberos 5 ticket cache: ‘API:Initial default ccache’
Default Principal: [email protected]
Valid Starting Expires Service Principal
07/01/04 02:32:54 07/01/04 12:32:54 krbtgt/[email protected]
renew until 07/08/04 02:32:54
07/01/04 02:32:57 07/01/04 12:32:54 afpserver/[email protected]
renew until 07/08/04 02:32:54
07/01/04 02:34:10 07/01/04 12:32:54 imap/[email protected]
renew until 07/08/04 02:32:54
07/01/04 02:35:10 07/01/04 12:32:54 host/[email protected]
renew until 07/08/04 02:32:54
07/01/04 03:52:18 07/01/04 12:32:54 smtp/[email protected]
renew until 07/08/04 02:32:54

obiviously, i don’t have 3 imap tickets in this example, but i usually get 2 or 3 imap tickets for user charlesx, when 3 different users log in from mail.app
it seems to happen if i need to reboot the client after a few days and i first launch mail.app. i find if my client is up for a week, i start getting bad login errors and TOKEN – malformed etc…

i haven’t seen this behavior in ssh, sftp, or smtp… however, when i ssh into the server, i get unknown_pid errors that i guess are sshd related. if i use a ssh or sftp gui, like fugu or rbrowser i get 4 to 5 krbtgt tickets, but i guess that’s normal… i don’t know.

[bustthis]

% sudo klist
Password:
Kerberos 5 ticket cache: ‘API:Initial default ccache’
Default Principal: [email protected]
Valid Starting Expires Service Principal
07/01/04 00:19:02 07/01/04 10:19:02 krbtgt/[email protected]
renew until 07/08/04 00:19:02

% sudo klist -kt
Keytab name: FILE:/etc/krb5.keytab
KVNO Timestamp Principal
—- —————– ——————————————————–
3 06/02/04 04:16:40 host/[email protected]
3 06/02/04 04:16:40 host/[email protected]
3 06/02/04 04:16:40 host/[email protected]
3 06/02/04 04:16:40 smtp/[email protected]
3 06/02/04 04:16:40 smtp/[email protected]
3 06/02/04 04:16:40 smtp/[email protected]
3 06/02/04 04:16:40 pop/[email protected]
3 06/02/04 04:16:40 pop/[email protected]
3 06/02/04 04:16:40 pop/[email protected]
3 06/02/04 04:16:40 imap/[email protected]
3 06/02/04 04:16:40 imap/[email protected]
3 06/02/04 04:16:40 imap/[email protected]
3 06/02/04 04:16:40 ftp/[email protected]
3 06/02/04 04:16:40 ftp/[email protected]
3 06/02/04 04:16:40 ftp/[email protected]
3 06/02/04 04:16:40 afpserver/[email protected]
3 06/02/04 04:16:40 afpserver/[email protected]
3 06/02/04 04:16:40 afpserver/[email protected]

if i leave my mail.app open for a few days, i start getting error messages… bad login and TOKEN errors.

[bustthis]

i should of explained myself better in that post 🙂

i was getting the same error:
klist: No such file or directory while starting scan of keytab (null)

this seemed to always occur when i ran klist -kt from a remote session with the server as root. if i ran sudo klist -kt on the server directly it would report the proper keytab settings. i’m not sure if that makes sense…

[bustthis]

try sudo klist -kt

[bustthis]

any recomendations on better krb mail client? i don’t like eudora!

this only happens from time to time – i get 3 imap tickets for the user thats logged in… haven’t seen anyone else talk about this problem.

maybe this is a new post, sorry…

i am reading this now: http://web.mit.edu/macdev/KfM/Common/Documentation/preferences-osx.html#quickguide

i don’t seem to have /etc/krb5.conf… i guess /var/db/krb5kdc/kdc.conf
is being used, the reason i am asking is because i would like to see some of the logs associated with kerberos. i have the following lines in:
[logging]
kdc = FILE:/var/log/krb5kdc/kdc.log
admin_server = FILE:/var/log/krb5kdc/kadmin.log

but no .logs are being created, do i need to add a line to the /etc/syslog?

hopefully, if enough people report the mail.app bug to apple they will update it.

thanks for your help

[Author]

Posts