Debian: After upgrade more SPAM.

[blusowiec]

Hello,

After I upgraded Debian 2.6.32-36-server I have lots of user emails in SPAM (more then before)

Upgraded packages:
1. apport (1.13.3-0ubuntu2, 1.13.3-0ubuntu2.1)
- error
Setting up apport (1.13.3-0ubuntu2.1) ...
start: Job failed to start

2. python-problem-report (1.13.3-0ubuntu2, 1.13.3-0ubuntu2.1)
- OK
3. python-apport (1.13.3-0ubuntu2, 1.13.3-0ubuntu2.1)
- OK

Zimbra: Release 7.1.1_GA_3196.UBUNTU10_64 UBUNTU10_64 FOSS edition.

Amavis log:
Dec 7 13:17:51 zeus amavis[14697]: logging initialized, log level 2, syslog: amavis.local0
Dec 7 13:17:51 zeus amavis[14697]: starting. /opt/zimbra/amavisd/sbin/amavisd at zeus.abc.com amavisd-new-2.6.4 (20090625), Unicode aware, LC_ALL="C", LANG="C"
Dec 7 13:17:51 zeus amavis[14697]: user=1001, EUID: 1001 (1001); group=, EGID: 1001 4 5 105 1001 (1001 4 5 105 1001)
Dec 7 13:17:51 zeus amavis[14697]: Perl version 5.010001
Dec 7 13:17:51 zeus amavis[14697]: SpamControl: scanner SpamAssassin, module Amavis::SpamControl::SpamAssassin
Dec 7 13:17:51 zeus amavis[14697]: SpamControl: scanner DSPAM, module Amavis::SpamControl::ExtProg
Dec 7 13:17:51 zeus amavis[14697]: INFO: SA version: 3.3.1, 3.003001, no optional modules: Net::CIDR::Lite Sys::Hostname::Long Encode::Detect Razor2::Client::Agent Image::Info Image::Info::GIF Image::Info::JPEG Image::Info::PNG Image::Info::TIFF auto::NetAddr::IP::Util::ipv6_n2d auto::NetAddr::IP::Util::ipv6_n2x
Dec 7 13:17:51 zeus amavis[14697]: SpamControl: init_pre_chroot on SpamAssassin done
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: Process Backgrounded
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: 2011/12/07-13:17:51 Amavis (type Net::Server::PreForkSimple) starting! pid(14700)
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: Using default listen value of 128
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: Binding to UNIX socket file /opt/zimbra/data/amavisd/amavisd.sock using SOCK_STREAM
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: Group Not Defined. Defaulting to EGID '1001 4 5 105 1001'
Dec 7 13:17:51 zeus amavis[14700]: Net::Server: User Not Defined. Defaulting to EUID '1001'
Dec 7 13:17:51 zeus amavis[14700]: config files read: /opt/zimbra/conf/amavisd.conf
Dec 7 13:17:51 zeus amavis[14700]: Module Amavis::Conf 2.207
Dec 7 13:17:51 zeus amavis[14700]: Module Archive::Zip 1.30
Dec 7 13:17:51 zeus amavis[14700]: Module Compress::Zlib 2.033
Dec 7 13:17:51 zeus amavis[14700]: Module Convert::TNEF 0.17
Dec 7 13:17:51 zeus amavis[14700]: Module Convert::UUlib 1.34
Dec 7 13:17:51 zeus amavis[14700]: Module Crypt::OpenSSL::RSA 0.26
Dec 7 13:17:51 zeus amavis[14700]: Module DBD::mysql 4.018
Dec 7 13:17:51 zeus amavis[14700]: Module DBI 1.616
Dec 7 13:17:51 zeus amavis[14700]: Module DB_File 1.821
Dec 7 13:17:51 zeus amavis[14700]: Module Digest::MD5 2.39
Dec 7 13:17:51 zeus amavis[14700]: Module Digest::SHA 5.50
Dec 7 13:17:51 zeus amavis[14700]: Module IO::Socket::INET6 2.67
Dec 7 13:17:51 zeus amavis[14700]: Module MIME::Entity 5.427
Dec 7 13:17:51 zeus amavis[14700]: Module MIME::Parser 5.427
Dec 7 13:17:51 zeus amavis[14700]: Module MIME::Tools 5.427
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::DKIM::Signer 0.39
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::DKIM::Verifier 0.39
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::Header 2.07
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::Internet 2.07
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::SPF 2.008
Dec 7 13:17:51 zeus amavis[14700]: Module Mail::SpamAssassin 3.003001
Dec 7 13:17:51 zeus amavis[14700]: Module Net::DNS 0.66
Dec 7 13:17:51 zeus amavis[14700]: Module Net::LDAP 0.4001
Dec 7 13:17:51 zeus amavis[14700]: Module Net::Server 0.99
Dec 7 13:17:51 zeus amavis[14700]: Module NetAddr::IP 4.040
Dec 7 13:17:51 zeus amavis[14700]: Module Socket6 0.23
Dec 7 13:17:51 zeus amavis[14700]: Module Time::HiRes 1.9721
Dec 7 13:17:51 zeus amavis[14700]: Module URI 1.58
Dec 7 13:17:51 zeus amavis[14700]: Module Unix::Syslog 1.1
Dec 7 13:17:51 zeus amavis[14700]: Amavis::DB code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: Amavis::Cache code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: SQL base code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: SQL::Log code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: SQL::Quarantine NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: Lookup::SQL code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: Lookup::LDAP code loaded
Dec 7 13:17:51 zeus amavis[14700]: AM.PDP-in proto code loaded
Dec 7 13:17:51 zeus amavis[14700]: SMTP-in proto code loaded
Dec 7 13:17:51 zeus amavis[14700]: Courier proto code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: SMTP-out proto code loaded
Dec 7 13:17:51 zeus amavis[14700]: Pipe-out proto code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: BSMTP-out proto code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: Local-out proto code loaded
Dec 7 13:17:51 zeus amavis[14700]: OS_Fingerprint code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: ANTI-VIRUS code loaded
Dec 7 13:17:51 zeus amavis[14700]: ANTI-SPAM code loaded
Dec 7 13:17:51 zeus amavis[14700]: ANTI-SPAM-EXT code loaded
Dec 7 13:17:51 zeus amavis[14700]: ANTI-SPAM-C code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: ANTI-SPAM-SA code loaded
Dec 7 13:17:51 zeus amavis[14700]: Unpackers code loaded
Dec 7 13:17:51 zeus amavis[14700]: DKIM code loaded
Dec 7 13:17:51 zeus amavis[14700]: Tools code NOT loaded
Dec 7 13:17:51 zeus amavis[14700]: Found $file at /usr/bin/file
Dec 7 13:17:51 zeus amavis[14700]: No $altermime, not using it
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .mail
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .asc
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .uue
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .hqx
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .ync
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .F tried: unfreeze, freeze -d, melt, fcat
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .Z at /bin/uncompress
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .gz at /bin/gzip -d
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .gz (backup, not used)
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .bz2 at /bin/bzip2 -d
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .lzo tried: lzop -d
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .rpm tried: rpm2cpio.pl, rpm2cpio
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .cpio at /bin/cpio
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .tar at /bin/cpio
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .tar (backup, not used)
Dec 7 13:17:51 zeus amavis[14700]: Found decoder for .deb at /usr/bin/ar
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .zip
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .7z tried: 7zr, 7za, 7z
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .rar tried: rar, unrar
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .arj tried: arj, unarj
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .arc tried: nomarch, arc
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .zoo tried: zoo, unzoo
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .lha tried: lha
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .cab tried: cabextract
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .tnef tried: tnef
Dec 7 13:17:51 zeus amavis[14700]: Internal decoder for .tnef
Dec 7 13:17:51 zeus amavis[14700]: No decoder for .exe tried: rar, unrar; lha; arj, unarj
Dec 7 13:17:51 zeus amavis[14700]: Using primary internal av scanner code for ClamAV-clamd
Dec 7 13:17:51 zeus amavis[14700]: Found spam scanner DSPAM at /opt/zimbra/dspam/bin/dspam
Dec 7 13:17:51 zeus amavis[14700]: initializing Mail::SpamAssassin
Dec 7 13:17:51 zeus amavis[14700]: SpamAssassin debug facilities: info
Dec 7 13:17:51 zeus amavis[14700]: _WARN: netset: cannot include 127.0.0.0/8 as it has already been included
Dec 7 13:17:51 zeus amavis[14700]: _WARN: netset: cannot include 127.0.0.0/8 as it has already been included
Dec 7 13:17:51 zeus amavis[14700]: _WARN: netset: cannot include 192.168.1.0/24 as it has already been included
Dec 7 13:17:51 zeus amavis[14700]: _WARN: netset: cannot include 10.10.0.0/24 as it has already been included
Dec 7 13:17:52 zeus amavis[14700]: SpamAssassin loaded plugins: AutoLearnThreshold, Bayes, BodyEval, Check, DKIM, DNSEval, FreeMail, HTMLEval, HTTPSMismatch, Hashcash, HeaderEval, ImageInfo, MIMEEval, MIMEHeader, Pyzor, Razor2, RelayEval, ReplaceTags, SPF, SpamCop, URIDNSBL, URIDetail, URIEval, VBounce, WLBLEval, WhiteListSubject
Dec 7 13:17:52 zeus amavis[14700]: SpamControl: init_pre_fork on SpamAssassin done
Dec 7 13:17:52 zeus amavis[14700]: extra modules loaded after daemonizing/chrooting: Mail/SpamAssassin/Plugin/FreeMail.pm

Does anybody have idea where is the problem??

Thanks a lot,
Dawid

[phoenix]

Originally Posted by blusowiec

After I upgraded Debian 2.6.32-36-server I have lots of user emails in SPAM (more then before)

That has nothing to do with the amount of spam you receive. You need to look at the headers of some of the email to see why the spam is being caught.

Originally Posted by blusowiec

Zimbra: Release 7.1.1_GA_3196.UBUNTU10_64 UBUNTU10_64 FOSS edition

Are you saying that you have the Ubuntu version of Zimbra installed on Debian? If that's the case you have an unsupported configuration, you should install the correct version of Zimbra on your debian server..

[blusowiec]

Originally Posted by phoenix

That has nothing to do with the amount of spam you receive. You need to look at the headers of some of the email to see why the spam is being caught.

X-DSPAM-Result: Spam
X-DSPAM-Class: Spam
X-DSPAM-Confidence: 0.56
X-DSPAM-Probability: 0.9838
X-DSPAM-Signature: N/A
X-Virus-Scanned: amavisd-new at zeus.ultimatravel.com
X-Spam-Flag: YES
X-Spam-Score: 8.108
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.108 tagged_above=-10 required=5
tests=[BAYES_00=-1.9, NO_RECEIVED=-0.001, NO_RELAYS=-0.001,
T_FRT_CONTACT=0.01, DSPAM:Spam=10.000] autolearn=ham

I have something like this. This email never should be tagged as SPAM.
Do you have idea why this email was tagged as SPAM??

Are you saying that you have the Ubuntu version of Zimbra installed on Debian? If that's the case you have an unsupported configuration, you should install the correct version of Zimbra on your debian server..

Sorry my mistake. I have UBUNTU Server.

Thanks,
Blusowiec

[blusowiec]

Problem resolved:

# rm -rf /opt/zimbra/data/dspam/data/z/i/zimbra/
# su - zimbra
$ zmcontrol restart