<html><head></head><body><div class="ydp451bc020yahoo-style-wrap" style="font-family:courier new, courier, monaco, monospace, sans-serif;font-size:13px;"><div id="ydp451bc020yiv5833394329"><div><div class="ydp451bc020yiv5833394329ydpa0063e15yahoo-style-wrap" style="font-family:courier new, courier, monaco, monospace, sans-serif;font-size:13px;"><div id="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597"><div><div class="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597ydp7d0f3c96yahoo-style-wrap" style="font-family:courier new, courier, monaco, monospace, sans-serif;font-size:13px;"><div id="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597ydp7d0f3c96yiv9334090459"><div><div class="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597ydp7d0f3c96yiv9334090459ydp271b4c66yahoo-style-wrap" style="font-family:courier new, courier, monaco, monospace, sans-serif;font-size:13px;"><div id="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597ydp7d0f3c96yiv9334090459ydp271b4c66yiv2122955858"><div><div class="ydp451bc020yiv5833394329ydpa0063e15yiv6800250597ydp7d0f3c96yiv9334090459ydp271b4c66yiv2122955858ydpf2afa145yahoo-style-wrap" style="font-family:courier new, courier, monaco, monospace, sans-serif;font-size:13px;"><div></div>
<div dir="ltr">Hello Nikolaos,</div><div dir="ltr"><br clear="none"></div><div dir="ltr">My setup is rather old too (a few years). <br clear="none"></div><div dir="ltr">I too am using amavis as the filter and let <br clear="none"></div><div dir="ltr">amavis call spamassassin as a library, that <br clear="none"></div><div dir="ltr">way spamassassin doesn't have to run in the <br clear="none"></div><div dir="ltr">background doing nothing, it will only be <br clear="none"></div><div dir="ltr">called when there's something to scan.</div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr" data-setdir="false">1. You can use sa directly from postfix.</div><div dir="ltr" data-setdir="false">The downside of this is that you won't be</div><div dir="ltr" data-setdir="false">able to have recipient-based rules.<br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">2. people reported poor auto-learning experience.</div><div dir="ltr" data-setdir="false">If you have successfully configured this in the</div><div dir="ltr" data-setdir="false">past, please share !</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">3. on debian, you set CRON=1 in <br></div><div dir="ltr" data-setdir="false">/etc/default/spamassassin/. There will be a <br></div><div dir="ltr" data-setdir="false">cron script doing the update.</div><div dir="ltr" data-setdir="false"><br></div><br><div dir="ltr" data-setdir="false">-- Yassine.<br></div><div dir="ltr"><br></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div><br clear="none"></div>
</div></div></div></div></div></div></div></div></div></div></div></div></div><div class="ydpce8de09dyiv5833394329yqt2986904839" id="ydpce8de09dyiv5833394329yqt42081"><div class="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597yqt1774041262" id="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597yqt42571"><div class="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459yqt7401478742" id="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459yqt40076"><div class="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459ydpdb3812d2yiv2122955858yqt6253780459" id="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459ydpdb3812d2yiv2122955858yqt83962"><div class="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459ydpdb3812d2yiv2122955858ydp872a236byahoo_quoted" id="ydpce8de09dyiv5833394329ydp6730948fyiv6800250597ydpf09e5846yiv9334090459ydpdb3812d2yiv2122955858ydp872a236byahoo_quoted_8281905794">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Thursday, December 17, 2020, 11:38:11 AM GMT+1, Nikolaos Milas <nmilas@noa.gr> wrote:
</div>
<div><br clear="none"></div>
<div><br clear="none"></div>
<div><div dir="ltr">Hello,<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I have been using a mail gateway with postfix/amavis/clamav/spamassassin <br clear="none"></div><div dir="ltr">for many years on CentOS 6.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I am now struggling to build a new system on CentOS 8 with the same <br clear="none"></div><div dir="ltr">components (and the same configuration) to replace the original one, but <br clear="none"></div><div dir="ltr">it is quite different from the original, so I will appreciate your guidance.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">(Packages were installed from EPEL.)<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">I am trying to follow online tutorials, which are different between them <br clear="none"></div><div dir="ltr">and differ from my original setup as well, so I am confused.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Some important questions:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">1. Originally, I have used amavis as the interface to spamassassin. <br clear="none"></div><div dir="ltr">However, current tutorials seem to suggest a direct call of spamassassin <br clear="none"></div><div dir="ltr">by postfix using spamass-milter.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Here is an example of such a tutorial:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> <a shape="rect" href="https://www.linuxbabe.com/mail-server/amavis-clamav-centos-8-rhel-8" rel="nofollow" target="_blank">https://www.linuxbabe.com/mail-server/amavis-clamav-centos-8-rhel-8</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> <a shape="rect" href="https://www.linuxbabe.com/redhat/spamassassin-centos-rhel-block-email-spam" rel="nofollow" target="_blank">https://www.linuxbabe.com/redhat/spamassassin-centos-rhel-block-email-spam</a><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">So, what is the suggested practice? In my original amavisd.conf (which I <br clear="none"></div><div dir="ltr">am now migrating), I had:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> $sa_tag_level_deflt = -999;<br clear="none"></div><div dir="ltr"> $sa_tag2_level_deflt = 3.4;<br clear="none"></div><div dir="ltr"> $sa_kill_level_deflt = 5.2;<br clear="none"></div><div dir="ltr"> $sa_dsn_cutoff_level = 9;<br clear="none"></div><div dir="ltr"> $sa_crediblefrom_dsn_cutoff_level = 10;<br clear="none"></div><div dir="ltr"> $sa_mail_body_size_limit = 400*1024;<br clear="none"></div><div dir="ltr"> $sa_spam_subject_tag = '* Spam ? * ';<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">It seems to me architecturally better to use spamassassin from within <br clear="none"></div><div dir="ltr">amavis (because amavis remains the main/central control point).<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Does this incur a penalty in SA functionality, effectiveness or performance?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">2. If I use spamassassin through amavis, how do I enable bayes filtering?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Since $MYHOME = '/var/spool/amavisd', would it be enough to create <br clear="none"></div><div dir="ltr">therein a .spamassassin directory (with amavis:amavis owner) and train <br clear="none"></div><div dir="ltr">filter?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">In my original (CentOS 6) system, I would do:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"># su amavis<br clear="none"></div><div dir="ltr">sh-4.1$<br clear="none"></div><div dir="ltr">sh-4.1$ sa-learn --dbpath '/var/amavis/var/.spamassassin' --spam <br clear="none"></div><div dir="ltr">/var/amavis/reported-spam<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">In CentOS 8 I would attempt the same (with adjusted paths) but I cannot <br clear="none"></div><div dir="ltr">even change user (which is required, since operations and db should be <br clear="none"></div><div dir="ltr">owned by amavis:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> # su amavis<br clear="none"></div><div dir="ltr"> This account is currently not available.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">How should I proceed?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Please advise.<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">3. I think I should enable sa-update. Shouldn't I?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> If the answer is yes, then would it be enough to set:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> SAUPDATE=yes<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> in /etc/sysconfig/sa-update<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> ...?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">How does this work? I don't see any cron job nor any active sa-update <br clear="none"></div><div dir="ltr">service. There exists an sa-update service and I can start it:<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"> systemctl start sa-update<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">but it cannot get enabled (for auto start with OS); If we try to enable, <br clear="none"></div><div dir="ltr">a message states: "The unit files have no installation config" etc..<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Yet, in /etc/sysconfig/sa-update, we read about the SAUPDATE=yes <br clear="none"></div><div dir="ltr">setting: "Run sa-update even if no daemon is detected".<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Does this daemon refer to sa-update (which means that we don't have to <br clear="none"></div><div dir="ltr">run it)?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Please help me with the above!<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">Thanks in advance,<br clear="none"></div><div dir="ltr">Nick<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div></div>
</div>
</div></div></div></div></div></body></html>