Problems integrating DCC with Zimbra

[nirg]

Hi,

I'm trying to enable DCC 1.3.42 on my Zimbra 4.0.2 install.
I've followed the nice Wiki page on improving the Anti-Spam, however i'm not able to verify that DCC is working correctly..

I've got the following in my salocal.cf:

use_razor2 1
score RAZOR2_CHECK 2.500
use_dcc 1
score DCC_CHECK 2.500
add_header all DCC _DCCB_: _DCCR_

And i've enabled the DCC plugin in the v310.pre file.This works correctly for Razor2 (I can see it in the email headers), but I am unable to see the DCC header appear..

Running a dcc check from the command prompt:

dccproc < test | grep DCC
X-DCC-INFN-TO-Metrics: {hostname} 1233; Body=6 Fuz1=6

which seems to indicate DCC is configured correctly.

Any ideas on what I might be doing wrong ?
Thanks,
Nir Gilboa

[claros]

Originally Posted by nirg

Hi,

I'm trying to enable DCC 1.3.42 on my Zimbra 4.0.2 install.
I've followed the nice Wiki page on improving the Anti-Spam, however i'm not able to verify that DCC is working correctly..

I've got the following in my salocal.cf:

use_razor2 1
score RAZOR2_CHECK 2.500
use_dcc 1
score DCC_CHECK 2.500
add_header all DCC _DCCB_: _DCCR_

And i've enabled the DCC plugin in the v310.pre file.This works correctly for Razor2 (I can see it in the email headers), but I am unable to see the DCC header appear..

Running a dcc check from the command prompt:

dccproc < test | grep DCC
X-DCC-INFN-TO-Metrics: {hostname} 1233; Body=6 Fuz1=6

which seems to indicate DCC is configured correctly.

Any ideas on what I might be doing wrong ?
Thanks,
Nir Gilboa

Restart amavisd (as zimbra user, zmamavisdctl restart)
You should be able to see dcc check connection going out from your server.
Check if your firewall allow this connection.
You should be able to see something like this in your emails:
X-Spam-Status: Yes, score=19.65 tagged_above=-10 required=6.6
tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, ADVANCE_FEE_3=3.336,
BAYES_99=3.5, DCC_CHECK=2.5, DSPAM_SPAM=0.5, HTML_MESSAGE=0.001,
NO_REAL_NAME=0.961, PLING_PLING=0.343, SARE_FRAUD_X3=1.667,
SARE_FRAUD_X4=1.667, SARE_LOTTO_SPAM=2.444, SPF_PASS=-0.5,
SUBJ_ALL_CAPS=0.997, UNDISC_RECIPS=0.841, UNPARSEABLE_RELAY=0.001]

If everything fails, start your amavis manually in debug mode and post your log here.

Ciao
Claudio

[nirg]

Hi,

Thanks for your reply. Well - it seems that DCC is running without any changes.. I simply ran a sniffer and I can see it is sending out queries and getting responses.

 myserver -> 142.27.70.214 DCCP Request: Report and Query
 142.27.70.214 -> myserver  DCCP Response: Server Response
 myserver -> 142.27.70.214 DCCP Request: Report and Query
 myserver -> 142.27.70.214 DCCP Request: Report and Query
 142.27.70.214 -> myserver  DCCP Response: Server Response
 142.27.70.214 -> myserver  DCCP Response: Server Response

Anyhow, thanks again - I now have DSPAM, RAZOR and DCC running, which results in a big improvement in spam detection.

Nir