Does anyone know where you would add TRUSTED_RULESETS for SpamAssassin?
I found a few “[SIZE=-1]rulesemporium” type of sites that have new, updated CF files for SpamAssassin, and i’d like to add them to reduce spam on my servers, but i can’t figure out where InterWorx keeps the config file I need to add the TRUSTED_RULESETS line … to allow these custom rulesets.
I know the CF files themselves are kept in /usr/share/spamassassin — and i know that most SpamAssassin installations (on anything BUT an InterWorx server) usually keeps a .spamassassin folder in each user’s home dir?
Please download an untar the files.
Go into each directory (in above order) and run:
perl Makefile.PL
make
make install
You should now be able to use sa-update.
As for the gpg key I just use --nogpg in the sa-update cmd for now.
If you want to import keys be sure to create the directory:
/etc/mail/spamassassin/sa-update-keys in advance and chmod 700
Please download an untar the files.
Go into each directory (in above order) and run:
perl Makefile.PL
make
make install
You should now be able to use sa-update.
As for the gpg key I just use --nogpg in the sa-update cmd for now.
If you want to import keys be sure to create the directory:
/etc/mail/spamassassin/sa-update-keys in advance and chmod 700
hth
-tsl-[/quote]
Worked beautifully - this should be stickied/added to the InterWorx manual =)
This solution was working great for me until Iworx 3.0.x
Now, last night, the cron job didn’t run. Instead, I got an email that said this:
error: GPG validation failed!
The update downloaded successfully, but it was not signed with a trusted GPG key. Instead, it was signed with the following keys:
24F434CE
Perhaps you need to import the channel’s GPG key? For example:
^^ Which I tried (re-importing the new key and re-running the cronjob command - no go:
[root@TSH root]# sa-update --import GPG.KEY
[root@TSH root]# /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE
Insecure dependency in eval while running with -T switch at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 1822.
Any ideas? Had a client email me about an increased amount of spam already - crazy impatient people! =)
A step back =/ In waiting for a reply, I started messing with it myself. What I did is that I opened the PerMsgStatus file and commented out the one line the error referred to (because after some searches, it appeared that one command wasn’t recognized due to mod_perl having something turned on). Anyways - when I tried to re-run sa-update, it errored out (with compilation errors) and now, SpamAssassin won’t start at all =/
[root@TSH root]# service spamassassin restart
Shutting down spamd: [FAILED]
Starting spamd: Variable “$uriRe” will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2103.
Variable “$schemeRE” will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2112.
Variable “$Addr_spec_re” will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2136.
Variable “$tldsRE” will not stay shared at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2140.
Missing right curly or square bracket at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2998, at end of line
syntax error at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2998, at EOF
Compilation failed in require at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 72.
BEGIN failed–compilation aborted at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 72.
Compilation failed in require at /usr/bin/spamd line 44.
BEGIN failed–compilation aborted at /usr/bin/spamd line 44.
[FAILED]
Thanks for the reply Paul, but I guess you posted that before seeing my EDIT? I fixed the compilation issue, but the sa-update issue remained. However, somehow, the problem fixed itself somehow today, because I came home, tried the sa-update command with the old gpg key and it worked — sooo all is good on that front.
We have the following rulesets in the file:
/etc/mail/spamassassin/sare-sa-update-channels.txt
Each night we run:
/usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart
We currently have a problem with the gpg key but I’m looking into that.
rgds
-tsl-[/QUOTE]
Couple questions…
Is sa-update run at all by an InterWorx cron at all?
Do I need to create the file /etc/mail/spamassassin/sare-sa-update-channels.txt or is this file supposed to be somewhere already and I add to it? (there is not one at that location)
What does sa-update actually do? Does it just download the requested filters into /etc/mail/spamassassin directory?
What is the difference in files in /usr/share/spamassassin and /etc/mail/spamassassin?
From what Im reading it seems like I would just need to do the following:
Create the file /etc/mail/spamassassin/sare-sa-update-channels.txt and put all the channels I want to get auto updates for.
Create /etc/mail/spamassassin/sa-update-keys in advance and chmod 700
Download the gpgkey and import the GPG (sa-update --import GPG.KEY)
Make sure Algorithm-Diff, Text-Diff, IO-Zlib, Archive-Tar packages are installed.
Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ; service spamassassin restart
Create the file /etc/mail/spamassassin/sare-sa-update-channels.txt and put all the channels I want to get auto updates for.
Create /etc/mail/spamassassin/sa-update-keys in advance and chmod 700
Installed perl packages via YUM.
yum install perl-IO-Zlib
yum install perl-Archive-Tar I did not have to install the other 2 packages which was nice b/c these to were an easy YUM install
Download the gpgkey and import the GPG (sa-update --import GPG.KEY)
Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A
Run /usr/bin/sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 24F434CE
and then it worked fine.
Checking /var/lib/spamassassin I had all the files in there (which answered one of my other questions where do these filters get installed to)[/QUOTE]
Hi
I followed up your instrcutions but I still have
channel: GPG validation failed, channel failed
error: GPG validation failed!
The update downloaded successfully, but it was not signed with a trusted GPG
key. Instead, it was signed with the following keys:
856AA88A
Perhaps you need to import the channel’s GPG key? For example:
Check out that road first.