Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Enabling DCC on KMS Spamassassin
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
KMS comes with the Spamassassin spam protection. Although not officially supported by Kerio, you can change spamassassin by modifying the spamassassin rules and config files. On Windows, all the important files are in

C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules

Before you change anything, you should definitely backup all files in this directory!

The .cf files contain the rules and the scores. They are plain text and you can change them, but you have to know what you are doing. You can also add new ones, for example 80_MyAntiSpamRules.cf. You need to restart the KMS Mail services to make the changes effective.

Spamassassin comes with three modules that are based on check-sums of mails: Pyzor, Razor2 and DCC. But they are not enabled in KMS. Unfortunately, it is not just a matter of enabling them, as the executables for them are missing.

So I spent about 5 hours to figure out how I could get DCC to work (I chose DCC because I don't need Python on my system for it to work).

What is DCC?

The DCC or Distributed Checksum Clearinghouse is a system of servers collecting and counting checksums of millions of mail messages. The counts can be used by SpamAssassin to detect and reject or filter spam. See http://www.rhyolite.com/anti-spam/dcc/ for details.

I had to do the following steps to get in to work on Windows (similar steps on Unix and Mac, I guess):

1) Download SpamAssassin for Win32 command-line tools from http://sawin32.sourceforge.net/ and unzip it to c:\sa

2) Make sure that you c:\sa\dccproc.exe is in place. This is the main executable for DCC.

3) Open a cmd prompt and type

c:
cd "Documents and Settings\Default User"
md .spamassassin

4) Copy the "map" file from C:\sa\etc\dcc to C:\Documents and Settings\Default User\.spamassassin This file contains the servers that can be contacted

for Spam checksums.

5) Locate and open C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules\local.cf

6) Add the following lines:

# Use DCC
dcc_home c:\sa\etc\dcc
dcc_path c:\sa\dccproc.exe
add_header all DCC _DCCB_: _DCCR_
use_dcc 1

7) Remove the following line

score DCC_CHECK 0

8) In the same directory, open the v310.pre file and uncomment the following line

loadplugin Mail::SpamAssassin::Plugin::DCC

9) Restart KMS

10) Also note that DCC requires that you open your firewall for DCC reply packets on UDP port 6277. Here's sample firewall rules required:

allow udp local gt 1023 to remote 6277
allow udp remote 6277 to local gt 1023

From now on you should see an entry in the headers of your incoming mails (if DCC detects it as spam):

DCC_CHECK: 1.37

The score depends on what you have defined in 50_scores.cf

This now works for me for several weeks without any problems and it eliminates a great deal of spam. Of course, you can PM me with any questions.

Once again, this is not a Kerio supported solution, but for me it works very well.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
freakinvibe wrote on Mon, 30 June 2008 05:39

KMS comes with the Spamassassin spam protection. Although not officially supported by Kerio, you can change spamassassin by modifying the spamassassin rules and config files. On Windows, all the important files are in

C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules

Before you change anything, you should definitely backup all files in this directory!

The .cf files contain the rules and the scores. They are plain text and you can change them, but you have to know what you are doing. You can also add new ones, for example 80_MyAntiSpamRules.cf. You need to restart the KMS Mail services to make the changes effective.

Spamassassin comes with three modules that are based on check-sums of mails: Pyzor, Razor2 and DCC. But they are not enabled in KMS. Unfortunately, it is not just a matter of enabling them, as the executables for them are missing.

So I spent about 5 hours to figure out how I could get DCC to work (I chose DCC because I don't need Python on my system for it to work).

What is DCC?

The DCC or Distributed Checksum Clearinghouse is a system of servers collecting and counting checksums of millions of mail messages. The counts can be used by SpamAssassin to detect and reject or filter spam. See http://www.rhyolite.com/anti-spam/dcc/ for details.

I had to do the following steps to get in to work on Windows (similar steps on Unix and Mac, I guess):

1) Download SpamAssassin for Win32 command-line tools from http://sawin32.sourceforge.net/ and unzip it to c:\sa

2) Make sure that you c:\sa\dccproc.exe is in place. This is the main executable for DCC.

3) Open a cmd prompt and type

c:
cd "Documents and Settings\Default User"
md .spamassassin

4) Copy the "map" file from C:\sa\etc\dcc to C:\Documents and Settings\Default User\.spamassassin This file contains the servers that can be contacted

for Spam checksums.

5) Locate and open C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules\local.cf

6) Add the following lines:

# Use DCC
dcc_home c:\sa\etc\dcc
dcc_path c:\sa\dccproc.exe
add_header all DCC _DCCB_: _DCCR_
use_dcc 1

7) Remove the following line

score DCC_CHECK 0

Cool In the same directory, open the v310.pre file and uncomment the following line

loadplugin Mail::SpamAssassin::Plugin::DCC

9) Restart KMS

10) Also note that DCC requires that you open your firewall for DCC reply packets on UDP port 6277. Here's sample firewall rules required:

allow udp local gt 1023 to remote 6277
allow udp remote 6277 to local gt 1023

From now on you should see an entry in the headers of your incoming mails (if DCC detects it as spam):

DCC_CHECK: 1.37

The score depends on what you have defined in 50_scores.cf

This now works for me for several weeks without any problems and it eliminates a great deal of spam. Of course, you can PM me with any questions.

Once again, this is not a Kerio supported solution, but for me it works very well.



I tried this on a windows 2003 server with no luck. i don't see where the dccproc.exe ever really runs. wish there was some way of testing this. i've got mine setup exactly like what is described here in these instructions.
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
I guess it is something small that is missing. To debug, you go to the debug log and you switch on

Content Filters > SpamAssassin Processing

Then, stop and start KMS. Search for "dcc" and post any lines from the log with "dcc" in it here.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
freakinvibe wrote on Tue, 05 August 2008 15:44

I guess it is something small that is missing. To debug, you go to the debug log and you switch on

Content Filters > SpamAssassin Processing

Then, stop and start KMS. Search for "dcc" and post any lines from the log with "dcc" in it here.


i'll do that and report back in a few.

okay check this out. here's what i have...it's a LOT:
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: network tests on, registering DCC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: registered [05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: network tests on, registering DCC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: did not register [05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: registering glue method for check_dcc (Mail::SpamAssassin::Plugin::DCC=HASH(0x3f32b40))
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464aDv3Sptmp
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [460] finished:  exit=0x0100
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464ER1FVxtmp
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4576] finished:  exit=0x0100
[05/Aug/2008 15:50:19][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin44641YKxnstmp
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4380] finished:  exit=0x0100
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464zj0gm1tmp
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [5188] finished:  exit=0x0100
[05/Aug/2008 15:50:21][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:23][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:23][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:23][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464eBIdYVtmp
[05/Aug/2008 15:50:23][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [3712] finished:  exit=0x0100
[05/Aug/2008 15:50:23][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464bcXc6Rtmp
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [5916] finished:  exit=0x0100
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464iSgoJctmp
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [3200] finished:  exit=0x0100
[05/Aug/2008 15:50:31][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:33][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:33][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:33][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464Ixj9Lqtmp
[05/Aug/2008 15:50:33][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [5236] finished:  exit=0x0100
[05/Aug/2008 15:50:33][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:35][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:35][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:35][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464Kbw8O1tmp
[05/Aug/2008 15:50:35][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [920] finished:  exit=0x0100
[05/Aug/2008 15:50:35][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:43][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:43][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:43][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464fPp7mQtmp
[05/Aug/2008 15:50:43][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4940] finished:  exit=0x0100
[05/Aug/2008 15:50:43][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:47][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:47][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:47][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464E0Lzj7tmp
[05/Aug/2008 15:50:47][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4668] finished:  exit=0x0100
[05/Aug/2008 15:50:47][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:49][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:49][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:49][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464U9COALtmp
[05/Aug/2008 15:50:49][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [3412] finished:  exit=0x0100
[05/Aug/2008 15:50:49][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:51][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:51][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:51][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464INT61itmp
[05/Aug/2008 15:50:51][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [2972] finished:  exit=0x0100
[05/Aug/2008 15:50:51][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464A8AyIBtmp
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4156] finished:  exit=0x0100
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464CvPeExtmp
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [5244] finished:  exit=0x0100
[05/Aug/2008 15:50:53][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:50:55][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:50:55][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:50:55][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464jFWZHhtmp
[05/Aug/2008 15:50:55][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [4300] finished:  exit=0x0100
[05/Aug/2008 15:50:55][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:03][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:03][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:03][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464z4WxP3tmp
[05/Aug/2008 15:51:03][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [3024] finished:  exit=0x0100
[05/Aug/2008 15:51:03][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:05][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:05][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:05][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin4464aYelcutmp
[05/Aug/2008 15:51:05][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: [2932] finished:  exit=0x0100
[05/Aug/2008 15:51:05][4204] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: config: read file c:\program [05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: config: read file c:\program [05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: network tests on, registering DCC
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: plugin: registered [05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: network tests on, registering DCC
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: plugin: did not register [05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: plugin: registering glue method for check_dcc (Mail::SpamAssassin::Plugin::DCC=HASH(0x3f32b40))
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104oSsBQGtmp
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [1568] finished:  exit=0x0100
[05/Aug/2008 15:51:32][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:48][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:48][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:48][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104tqo2Vatmp
[05/Aug/2008 15:51:48][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [5948] finished:  exit=0x0100
[05/Aug/2008 15:51:48][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:50][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:50][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:50][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104oWIXy1tmp
[05/Aug/2008 15:51:50][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [1196] finished:  exit=0x0100
[05/Aug/2008 15:51:50][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:51:52][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:51:52][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:51:52][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104qpmzRJtmp
[05/Aug/2008 15:51:52][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [4416] finished:  exit=0x0100
[05/Aug/2008 15:51:52][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:00][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:00][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:00][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin51041RTznUtmp
[05/Aug/2008 15:52:00][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [4136] finished:  exit=0x0100
[05/Aug/2008 15:52:00][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:01][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:01][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:01][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin51045eWofztmp
[05/Aug/2008 15:52:01][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [5532] finished:  exit=0x0100
[05/Aug/2008 15:52:01][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:03][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:03][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:03][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104tbSX5Stmp
[05/Aug/2008 15:52:03][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [2872] finished:  exit=0x0100
[05/Aug/2008 15:52:03][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:06][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:06][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:06][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104laBk2Ytmp
[05/Aug/2008 15:52:06][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [4532] finished:  exit=0x0100
[05/Aug/2008 15:52:06][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:08][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:08][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:08][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104D9TmkZtmp
[05/Aug/2008 15:52:08][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [3676] finished:  exit=0x0100
[05/Aug/2008 15:52:08][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:11][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:11][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:11][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104EWHL4ltmp
[05/Aug/2008 15:52:11][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [3180] finished:  exit=0x0100
[05/Aug/2008 15:52:11][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:14][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:14][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:14][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104dxHsSztmp
[05/Aug/2008 15:52:14][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [6056] finished:  exit=0x0100
[05/Aug/2008 15:52:14][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:17][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:17][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:17][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104wcwiIYtmp
[05/Aug/2008 15:52:17][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [2732] finished:  exit=0x0100
[05/Aug/2008 15:52:17][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:18][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:18][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:18][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin510411BT5ttmp
[05/Aug/2008 15:52:18][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [4488] finished:  exit=0x0100
[05/Aug/2008 15:52:18][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104QaZSDUtmp
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [3444] finished:  exit=0x0100
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104Bb4KU8tmp
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [880] finished:  exit=0x0100
[05/Aug/2008 15:52:21][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:25][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:25][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:25][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104hKRdJAtmp
[05/Aug/2008 15:52:25][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [1728] finished:  exit=0x0100
[05/Aug/2008 15:52:25][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header
[05/Aug/2008 15:52:27][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[05/Aug/2008 15:52:27][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[05/Aug/2008 15:52:27][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin5104T0TDtbtmp
[05/Aug/2008 15:52:27][5712] {spamassassin} Perl_stderr: [5104] dbg: dcc: [5816] finished:  exit=0x0100
[05/Aug/2008 15:52:27][5712] {spamassassin} Perl_stderr: dcc: check failed: failed to read header


[Updated on: Tue, 05 August 2008 22:55]

  •  
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
here are the first three lines:

[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: dcc: network tests on, registering DCC
[05/Aug/2008 15:50:18][4204] {spamassassin} Perl_stderr: [4464] dbg: plugin: registered Mail::SpamAssassin::Plugin::DCC=HASH(0x3d7bcb0)

does this mean the plugin registered properly?

also in your instructions you have:

"8) In the same directory, open the v310.pre file and uncomment the following line

loadplugin Mail::SpamAssassin::Plugin::DCC"

do you mean in the subfolders of kerio or the new c:\sa\etc\spamassassin ?

i'm showing both files have that section uncommented.



[Updated on: Tue, 05 August 2008 23:29]

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
OK, here is what you should have if it works:

[06/Aug/2008 08:45:15][5740] {spamassassin} Perl_stderr: [2672] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from <_a.t_>INC
[06/Aug/2008 08:45:15][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: network tests on, registering DCC
[06/Aug/2008 08:45:15][5740] {spamassassin} Perl_stderr: [2672] dbg: plugin: registered Mail::SpamAssassin::Plugin::DCC=HASH(0x3d7a464)

[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: plugin: registering glue method for check_dcc (Mail::SpamAssassin::Plugin::DCC=HASH(0x3e397b8))
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: dccproc is available: c:\sa\dccproc.exe
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: info: entering helper-app run mode
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: opening pipe: c:\sa\dccproc.exe -H -R < C:\WINDOWS\TEMP\.spamassassin2672mEuW0Ltmp
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: got response: X-DCC-dcc1-Metrics: basel 1182; Body=many Fuz1=many Fuz2=many
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: info: leaving helper-app run mode
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: dcc: listed: BODY=999999/999999 FUZ1=999999/999999 FUZ2=999999/999999
[06/Aug/2008 08:45:17][5740] {spamassassin} Perl_stderr: [2672] dbg: rules: ran eval rule DCC_CHECK ======> got hit

The error with dccifd is normal, as this is the module you would send checksums of spam mails to the DCC servers, we don't want that. What we want is dccproc, and this is loading properly.

Probably, dccproc can't make a connection to the DCC servers. From your KMS box, can you ping dcc.dcc-servers.net?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
Quote:

do you mean in the subfolders of kerio or the new c:\sa\etc\spamassassin ?

No, I mean

C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules\v310.pre

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
ccjwells

Messages: 192
Karma: 0
Send a private message to this user
The steps are indeed similar for getting this to work on linux. Here is what I did:

1.)Download and install DCC:
wget http://www.dcc-servers.net/dcc/source/dcc-dccproc.tar.Z
tar xzvf dcc-dccproc.tar.Z
cd dcc-dccproc-1.3.76
./configure --with-uid=root
make
make install
chown -R root:root /var/dcc
ln -s /var/dcc/libexec/dccifd /usr/local/bin/dccifd

2.)Edit local.cf

vi /opt/kerio/mailserver/plugins/spamassassin/rules/local.cf and add the following lines:

# Use DCC
dcc_home /var/dcc
dcc_path /usr/local/bin/dccproc
add_header all DCC_DCCB_: _DCCR_
use_dcc 1

and in the same file comment out

score DCC_CHECK 0
3.)Edit v310.pre

vi /opt/kerio/mailserver/plugins/spamassassin/rules/v310.pre

and uncomment

loadplugin Mail::SpamAssassin::Plugin::DCC

4.)Restart Kerio

So far, the above works with one minor exception; apparently I either have the file permissions wrong or dccproc can't find the map file in it's home directory. I keep getting this message in my error log:

dcc: check failed: no X-DCC returned (did you create a map file?)

The map file is there and cdcc info returns my servers. I was hoping someone here may have played with this on linux and can point me in a new direction.

**Edit

Apparently I need to check my firewall rules a little better. It still isn't working right, but at least the firewall is good.

[Updated on: Tue, 10 February 2009 20:03]

  •  
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
freakinvibe wrote on Thu, 04 December 2008 07:30

Quote:

do you mean in the subfolders of kerio or the new c:\sa\etc\spamassassin ?

No, I mean

C:\Program Files\Kerio\MailServer\plugins\spamassassin\rules\v310.pre



I still get this. i can ping dcc.dcc-servers.net easily. turned off my firewall on the mail server and still get this:

[10/Feb/2009 12:55:25][5592] {spamassassin} Perl_stderr: [3556] dbg: dcc: [3052] finished: exit=0x0100
[10/Feb/2009 12:55:25][5592] {spamassassin} Perl_stderr: [3556] dbg: info: leaving helper-app run mode
[10/Feb/2009 12:55:25][5592] {spamassassin} Perl_stderr: dcc: check failed: failed to read header

very strange stuff.
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
Just a little update to this. In Kerio Connect 7.4, Spamassissin has been updated to the latest version, including all the Perl modules. This prevents DCC from working properly on Windows systems. But by adding some lines to Util.pm, you can make it work again, see details here:

http://www.basics.net/index.php/2010/05/03/kerio-mail-server -6-7-2-enabling-dcc-on-spam-assassin/

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
Previous Topic: Ressource Calendar on a Web page
Next Topic: BUG: Kerio is creating random folders when adding additional mailboxes
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Aug 21 12:18:32 CEST 2017

Total time taken to generate the page: 0.00975 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.