Okkk... i've never used vpopmail, but i believe i can grasp it's basics. vpopmail is a qmail addon (and postfix apparently) allowing the use of virtual users in a qmail (and postfix) installation. Let's just turn to the qmail stuff...
Stevan Bajić wrote: > On Mon, 23 Nov 2009 23:54:27 +0100 > Stevan Bajić <ste...@bajic.ch> wrote: > > >> On Mon, 23 Nov 2009 22:19:02 +0000 >> Hugo Monteiro <hugo.monte...@fct.unl.pt> wrote: >> >> >>> Daniel Sánchez Pearson [Hacheté Diseños Web] wrote: >>> >>>> Hi Paul, >>>> >>>> Sorry about forgetting the 64 bit part! :( >>>> >>>> Here is the dspam --version >>>> >>>> >>>> # dspam --version >>>> >>>> DSPAM Anti-Spam Suite 3.8.0 (agent/library) >>>> >>>> Copyright (c) 2002-2006 Jonathan A. Zdziarski >>>> http://dspam.nuclearelephant.com >>>> >>>> DSPAM may be copied only under the terms of the GNU General Public >>>> License, >>>> a copy of which can be found with the DSPAM distribution kit. >>>> >>>> Configuration parameters: --with-dspam-group=dspam >>>> --with-dspam-home-group=dspam --enable-spam-delivery >>>> --enable-delivery-to-stdout >>>> >>>> >>>> >>> Hello Daniel, >>> >>> >>> You don't seem to be using use virtual users or preferences extension. >>> And you don't have large scale even having 187 domains and that kind of >>> traffic? Ouch... >>> >>> >>> >>>> >>>> I have to assume it was installed from source (does an rpm package for >>>> CentOS exist???) >>>> >>>> >>>> THanks again! >>>> >>>> >>> But for the problem, the most important part is for us to understand how >>> is dspam interacting with the rest of the mail system. >>> >>> Do you know how was qmail installed? If from source or from rpm? >>> You can find out by running rpm -qa | grep -i qmail ... see if anything >>> comes up. >>> >>> >> qmail-1.03-406.rhe5x.iworx.jms.chkuser >> >> Looks like someone went to the trouble of putting up some customized qmail packages, which apparently include some of John Simpsons patches and the chkuser patch. I found this also http://updates.interworx.info/iworx/SRPMS/4-release/cos5/x86_64/ and http://updates.interworx.info/iworx/SRPMS/ Daniel, if that is not yours and you wish to continue using those packages, i advise you to keep a copy of those src.rpm. >> >>> If not it was most probably manual compile and install. In that can >>> case, verify that you only have directories under /var/qmail, which is >>> the default install dir for qmail. >>> >>> >> # ls -lah /var/qmail >> total 104K >> drwxr-xr-x 13 root qmail 4.0K Oct 11 00:25 . >> drwx--x--x 25 root root 4.0K Nov 14 23:08 .. >> drwxr-sr-x 2 alias qmail 4.0K Oct 11 00:25 alias >> drwxr-xr-x 2 root qmail 4.0K Oct 11 00:25 bin >> drwxr-xr-x 2 root qmail 4.0K Oct 11 00:25 boot >> drwxr-xr-x 2 root qmail 4.0K Nov 23 09:42 control >> drwxr-xr-x 2 root qmail 4.0K Oct 5 09:33 doc >> drwxrw-rw- 2 root root 4.0K Mar 9 2008 greylite >> drwxr-xr-x 10 root qmail 4.0K Oct 5 09:33 man >> drwxr-x--- 11 qmailq qmail 4.0K Oct 5 09:33 queue >> -rwxr-xr-x 1 root qmail 215 Oct 5 09:33 rc >> drwxr-sr-x 77 simscan clamav 4.0K Nov 23 23:32 simscan >> drwxr-xr-x 2 root qmail 4.0K Oct 5 09:33 spam >> drwxr-xr-x 2 root qmail 4.0K Nov 22 19:47 users >> # >> >> >> Ok, so apparently, although it's a packaged install, it seems to reflect an ordinary qmail layout installation. >>> Also, how are you invoking dspam? Do you use any qmail-queue substitute >>> such as simscan? >>> >>> >> # ps auxww|grep -i simscan >> root 14438 0.0 0.0 61156 808 pts/2 S+ 23:45 0:00 grep -i >> simscan >> simscan 21162 0.0 0.0 3960 512 ? S Nov17 0:00 >> /var/qmail/bin/simscan >> simscan 26599 0.0 0.0 3960 508 ? S 20:47 0:00 >> /var/qmail/bin/simscan >> # >> >> >> Do you have any idea if simscan was built with dspam support? I noticed a simscan.src.rpm. That could be inspected to find out which were the build options. Another easier way of checking WITHOUT guaranties is to peep in /var/qmail/control/simcontrol. Check if it has spam=yes and spam_passthru=yes in it. >>> Check for the definition and value of QMAILQUEUE env variable in the >>> tcprules file. >>> >>> >> Where would that be? >> >> >> You already answered this one and Daniel confirmed. Simscan is being used as qmail-queue replacement. >>> Are you using real or virtual users (such as vpopmail or other)? >>> >>> >> How can this be checked? >> >> >> Looks like it's vpopmail. >>> Are you calling dspam in the delivery process, through maildrop, >>> procmail or dovecots deliver? >>> >>> >> I would say that he is not using maildrop since calling maildrop with a >> valid user gives me the following error: >> # /usr/bin/maildrop -V9 -d real_u...@domain.tld >> Invalid user specified. >> # >> >> I can't find a maildroprc in /etc so I assume he is not using maildrop. >> >> > Shit! I am an idiot! There is a maildrop file in each home directory. It's > called .mailfilter and the content is: > xfilter "dspam --user xxxxxx --deliver=innocent,spam --stdout" > if (/^X-DSPAM-Result: spam/:h) > { > to /home/xxxxx/Spam # Note: mbox format. dspam_corpus is incapable of > taking Maildir > } > else > { > to /home/xxxxx/Maildir/ > } > > > So I guess it's maildrop that delivers. > > > > Ok .. so now this is what i don't get. IF maildrop is being used, it's calling dspam AND deciding where to put the message. Does this mean that Simscan is only doing anti-virus and not Spam? >> He is using Courier IMAPD: >> * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT >> THREAD=REFERENCES SORT QUOTA IDLE] Courier-IMAP ready. Copyright 1998-2003 >> Double Precision, Inc. See COPYING for distribution information. >> >> >> >> >>> Even so, which LDA are you using? >>> qmail-local or any of the others i already refered? >>> >>> >> How can this be checked? >> >> >> >>> Are you invoking dspam from .qmail files? Check for the existence dspam >>> invocation in ~alias/.qmail-default or other ~alias/.qmail-* files. Also >>> check the users homedirs for the existence of ~/.qmail files. >>> >>> >> He is using those .qmail-default stuff: >> # cat /home/username/.qmail-default >> | /usr/bin/dspam --mode=teft --deliver=innocent --feature=chained,noise >> --user $...@$user --stdout | /home/vpopmail/bin/vdelivermail '' >> bounce-no-mailbox >> # >> >> are there any /var/qmail/alias/.qmail* files? From what i understand, reading http://www.inter7.com/vpopmail/doc/vdelivermail.html That pipes the message through DSPAM and then bounces it back if DSPAM fails? .. If not, DSPAM handles the message and passes it over the delivey agent? >> I see here already that he is using old stuff from 3.6.8 (the chained part >> in feature) but that is not so important. I mean it will fill up his log but >> it's not the core of his problem. >> >> >> >>> Can you check for the definition of $CONFIG{'DSPAM_ARGS'} in your webui >>> configuration file? >>> >>> >> $CONFIG{'DSPAM_ARGS'} = "--deliver=innocent --class=innocent " . >> "--source=error --user %CURRENT_USER% -d %u"; >> >> >> The whole problem can be right here. I'm assuming that DSPAM is handling the messages and pass them over to TrustedDeliveryAgent. Problem is that there's TrustedDeliveryAgent "/home/vpopmail/bin/dspamdel.sh" # Gary TrustedDeliveryAgent "/usr/bin/maildrop" # Maildrop #TrustedDeliveryAgent "/usr/local/sbin/exim -oMr spam-scanned" # Exim # TrustedDeliveryAgent "/usr/bin/procmail" TrustedDeliveryAgent "/var/qmail/bin/sendmail" UntrustedDeliveryAgent "/usr/bin/safecat Maildir/tmp Maildir/new" in dspam.conf. Which is used? the first? If so, what does /home/vpopmail/bin/dspamdel.sh do? ... and who is Gary!? =D >>> What is the role of the qmail server in the email infra-structure? Is it >>> just a relay (MX which delivers into a backend server)? Is it a server >>> that also holds the users maildirs/mailboxes? >>> >>> >> I can't answer this for you. >> >> >> Looks like an all-in-one machine. >>> Sorry for all the questions but the price to pay for using flexible >>> software is that there are so many ways to get things done that one has >>> to be familiar with the type of setup. >>> >>> >>> Regards, >>> >>> Hugo Monteiro. >>> >>> >> -- >> Kind Regards from Switzerland, >> >> Stevan Bajić >> >> Thanks for the help Steve ;) R's, Hugo Monteiro. >> >>>> ----------------------------------------------- >>>> Daniel Sánchez Pearson >>>> >>>> Hacheté Diseños Web >>>> >>>> danielsanc...@hachete.com <mailto:danielsanc...@hachete.com> >>>> >>>> http://www.hachete.com >>>> >>>> Móvil: 607 554527 >>>> Fijo: 968 248335 >>>> >>>> ----- Original Message ----- >>>> *From:* Paul Cockings <mailto:ds...@cytringan.co.uk> >>>> *To:* "Daniel Sánchez Pearson [Hacheté Diseños Web]" >>>> <mailto:danielsanc...@hachete.com> >>>> *Cc:* dspam-user@lists.sourceforge.net >>>> <mailto:dspam-user@lists.sourceforge.net> >>>> *Sent:* Monday, November 23, 2009 9:45 PM >>>> *Subject:* Re: [Dspam-user] Retrained emails don't get delivered >>>> to user's inbox >>>> >>>> Daniel Sánchez Pearson [Hacheté Diseños Web] wrote: >>>> >>>>> - I can install CentOS and run a few commands, but don't know how >>>>> qmail works, for example. I know about mysql, but I'm not >>>>> familiar with the command line. >>>>> - What OS/Arch are you running: CentOS release 5.4 (Final) >>>>> - Roughly what hardware: Dual Xeon 2.5GHz, 8GB RAM, 2 x 73SAS >>>>> disks on a Dell Perc RAID 5 >>>>> - How long has this server been running: roughly, 2 years >>>>> - What MTA - postfix? qmail? sendmail?: qmail >>>>> - Which Dspam version (do dspam --version and post the output to >>>>> this list): 3.8.0 >>>>> - Which Backend storage driver do you use >>>>> - Post your Dspam.conf (*** the passwords): >>>>> http://www.hachete.com/dspam.conf >>>>> - Which http server do you use: Apache >>>>> - How much traffic is handled by this server user/domains: around >>>>> 500GB/month on 187 domains >>>>> - Can you describe how your setup is 'strung' together? ie is it >>>>> a gateway filter etc: It's a server with Interworx control panel >>>>> and the same server sends and receives email >>>>> - Anything else running on the server: >>>>> >>>> Can you post the full output from dspam --version (it will show >>>> which build options were used) >>>> I assume CentOS x86_64 (aka 64 bit?) >>>> >>>> Do you know if dspam was installed from rpm/package or from source? >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> ------------------------------------------------------------------------------ >>>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 >>>> 30-Day >>>> trial. Simplify your report design, integration and deployment - and focus >>>> on >>>> what you do best, core application coding. Discover what's new with >>>> Crystal Reports now. http://p.sf.net/sfu/bobj-july >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> Dspam-user mailing list >>>> Dspam-user@lists.sourceforge.net >>>> https://lists.sourceforge.net/lists/listinfo/dspam-user >>>> >>>> >>> -- >>> ci.fct.unl.pt:~# cat .signature >>> >>> Hugo Monteiro >>> Email : hugo.monte...@fct.unl.pt >>> Telefone : +351 212948300 Ext.15307 >>> Web : http://hmonteiro.net >>> >>> Centro de Informática >>> Faculdade de Ciências e Tecnologia da >>> Universidade Nova de Lisboa >>> Quinta da Torre 2829-516 Caparica Portugal >>> Telefone: +351 212948596 Fax: +351 212948548 >>> www.ci.fct.unl.pt ap...@fct.unl.pt >>> >>> ci.fct.unl.pt:~# _ >>> >>> >>> ------------------------------------------------------------------------------ >>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day >>> trial. Simplify your report design, integration and deployment - and focus >>> on >>> what you do best, core application coding. Discover what's new with >>> Crystal Reports now. http://p.sf.net/sfu/bobj-july >>> _______________________________________________ >>> Dspam-user mailing list >>> Dspam-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/dspam-user >>> >>> >> ------------------------------------------------------------------------------ >> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day >> trial. Simplify your report design, integration and deployment - and focus >> on >> what you do best, core application coding. Discover what's new with >> Crystal Reports now. http://p.sf.net/sfu/bobj-july >> _______________________________________________ >> Dspam-user mailing list >> Dspam-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/dspam-user >> > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Dspam-user mailing list > Dspam-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/dspam-user > -- ci.fct.unl.pt:~# cat .signature Hugo Monteiro Email : hugo.monte...@fct.unl.pt Telefone : +351 212948300 Ext.15307 Web : http://hmonteiro.net Centro de Informática Faculdade de Ciências e Tecnologia da Universidade Nova de Lisboa Quinta da Torre 2829-516 Caparica Portugal Telefone: +351 212948596 Fax: +351 212948548 www.ci.fct.unl.pt ap...@fct.unl.pt ci.fct.unl.pt:~# _ ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
