On Tue, 24 Nov 2009 00:21:50 +0000 Hugo Monteiro <hugo.monte...@fct.unl.pt> wrote:
> Okkk... i've never used vpopmail, but i believe i can grasp it's basics. > vpopmail is a qmail addon (and postfix apparently) allowing the use of > virtual users in a qmail (and postfix) installation. Let's just turn to > the qmail stuff... > > > Stevan Bajić wrote: > > On Mon, 23 Nov 2009 23:54:27 +0100 > > Stevan Bajić <ste...@bajic.ch> wrote: > > > > > >> On Mon, 23 Nov 2009 22:19:02 +0000 > >> Hugo Monteiro <hugo.monte...@fct.unl.pt> wrote: > >> > >> > >>> Daniel Sánchez Pearson [Hacheté Diseños Web] wrote: > >>> > >>>> Hi Paul, > >>>> > >>>> Sorry about forgetting the 64 bit part! :( > >>>> > >>>> Here is the dspam --version > >>>> > >>>> > >>>> # dspam --version > >>>> > >>>> DSPAM Anti-Spam Suite 3.8.0 (agent/library) > >>>> > >>>> Copyright (c) 2002-2006 Jonathan A. Zdziarski > >>>> http://dspam.nuclearelephant.com > >>>> > >>>> DSPAM may be copied only under the terms of the GNU General Public > >>>> License, > >>>> a copy of which can be found with the DSPAM distribution kit. > >>>> > >>>> Configuration parameters: --with-dspam-group=dspam > >>>> --with-dspam-home-group=dspam --enable-spam-delivery > >>>> --enable-delivery-to-stdout > >>>> > >>>> > >>>> > >>> Hello Daniel, > >>> > >>> > >>> You don't seem to be using use virtual users or preferences extension. > >>> And you don't have large scale even having 187 domains and that kind of > >>> traffic? Ouch... > >>> > >>> > >>> > >>>> > >>>> I have to assume it was installed from source (does an rpm package for > >>>> CentOS exist???) > >>>> > >>>> > >>>> THanks again! > >>>> > >>>> > >>> But for the problem, the most important part is for us to understand how > >>> is dspam interacting with the rest of the mail system. > >>> > >>> Do you know how was qmail installed? If from source or from rpm? > >>> You can find out by running rpm -qa | grep -i qmail ... see if anything > >>> comes up. > >>> > >>> > >> qmail-1.03-406.rhe5x.iworx.jms.chkuser > >> > >> > > > Looks like someone went to the trouble of putting up some customized > qmail packages, which apparently include some of John Simpsons patches > and the chkuser patch. > > I found this also > > http://updates.interworx.info/iworx/SRPMS/4-release/cos5/x86_64/ > > and > > http://updates.interworx.info/iworx/SRPMS/ > > Daniel, if that is not yours and you wish to continue using those > packages, i advise you to keep a copy of those src.rpm. > > > >> > >>> If not it was most probably manual compile and install. In that can > >>> case, verify that you only have directories under /var/qmail, which is > >>> the default install dir for qmail. > >>> > >>> > >> # ls -lah /var/qmail > >> total 104K > >> drwxr-xr-x 13 root qmail 4.0K Oct 11 00:25 . > >> drwx--x--x 25 root root 4.0K Nov 14 23:08 .. > >> drwxr-sr-x 2 alias qmail 4.0K Oct 11 00:25 alias > >> drwxr-xr-x 2 root qmail 4.0K Oct 11 00:25 bin > >> drwxr-xr-x 2 root qmail 4.0K Oct 11 00:25 boot > >> drwxr-xr-x 2 root qmail 4.0K Nov 23 09:42 control > >> drwxr-xr-x 2 root qmail 4.0K Oct 5 09:33 doc > >> drwxrw-rw- 2 root root 4.0K Mar 9 2008 greylite > >> drwxr-xr-x 10 root qmail 4.0K Oct 5 09:33 man > >> drwxr-x--- 11 qmailq qmail 4.0K Oct 5 09:33 queue > >> -rwxr-xr-x 1 root qmail 215 Oct 5 09:33 rc > >> drwxr-sr-x 77 simscan clamav 4.0K Nov 23 23:32 simscan > >> drwxr-xr-x 2 root qmail 4.0K Oct 5 09:33 spam > >> drwxr-xr-x 2 root qmail 4.0K Nov 22 19:47 users > >> # > >> > >> > >> > > > Ok, so apparently, although it's a packaged install, it seems to reflect > an ordinary qmail layout installation. > > > > >>> Also, how are you invoking dspam? Do you use any qmail-queue substitute > >>> such as simscan? > >>> > >>> > >> # ps auxww|grep -i simscan > >> root 14438 0.0 0.0 61156 808 pts/2 S+ 23:45 0:00 grep -i > >> simscan > >> simscan 21162 0.0 0.0 3960 512 ? S Nov17 0:00 > >> /var/qmail/bin/simscan > >> simscan 26599 0.0 0.0 3960 508 ? S 20:47 0:00 > >> /var/qmail/bin/simscan > >> # > >> > >> > >> > > > Do you have any idea if simscan was built with dspam support? I noticed > a simscan.src.rpm. That could be inspected to find out which were the > build options. > Another easier way of checking WITHOUT guaranties is to peep in > /var/qmail/control/simcontrol. Check if it has spam=yes and > spam_passthru=yes in it. > > > > >>> Check for the definition and value of QMAILQUEUE env variable in the > >>> tcprules file. > >>> > >>> > >> Where would that be? > >> > >> > >> > > > You already answered this one and Daniel confirmed. Simscan is being > used as qmail-queue replacement. > > > >>> Are you using real or virtual users (such as vpopmail or other)? > >>> > >>> > >> How can this be checked? > >> > >> > >> > > > Looks like it's vpopmail. > > > >>> Are you calling dspam in the delivery process, through maildrop, > >>> procmail or dovecots deliver? > >>> > >>> > >> I would say that he is not using maildrop since calling maildrop with a > >> valid user gives me the following error: > >> # /usr/bin/maildrop -V9 -d real_u...@domain.tld > >> Invalid user specified. > >> # > >> > >> I can't find a maildroprc in /etc so I assume he is not using maildrop. > >> > >> > > Shit! I am an idiot! There is a maildrop file in each home directory. It's > > called .mailfilter and the content is: > > xfilter "dspam --user xxxxxx --deliver=innocent,spam --stdout" > > if (/^X-DSPAM-Result: spam/:h) > > { > > to /home/xxxxx/Spam # Note: mbox format. dspam_corpus is incapable > > of taking Maildir > > } > > else > > { > > to /home/xxxxx/Maildir/ > > } > > > > > > So I guess it's maildrop that delivers. > > > > > > > > > > > Ok .. so now this is what i don't get. IF maildrop is being used, it's > calling dspam AND deciding where to put the message. Does this mean that > Simscan is only doing anti-virus and not Spam? > > > >> He is using Courier IMAPD: > >> * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE > >> THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE] Courier-IMAP > >> ready. Copyright 1998-2003 Double Precision, Inc. See COPYING for > >> distribution information. > >> > >> > >> > >> > >>> Even so, which LDA are you using? > >>> qmail-local or any of the others i already refered? > >>> > >>> > >> How can this be checked? > >> > >> > >> > >>> Are you invoking dspam from .qmail files? Check for the existence dspam > >>> invocation in ~alias/.qmail-default or other ~alias/.qmail-* files. Also > >>> check the users homedirs for the existence of ~/.qmail files. > >>> > >>> > >> He is using those .qmail-default stuff: > >> # cat /home/username/.qmail-default > >> | /usr/bin/dspam --mode=teft --deliver=innocent --feature=chained,noise > >> --user $...@$user --stdout | /home/vpopmail/bin/vdelivermail '' > >> bounce-no-mailbox > >> # > >> > >> > > > are there any /var/qmail/alias/.qmail* files? > > From what i understand, reading > http://www.inter7.com/vpopmail/doc/vdelivermail.html > > That pipes the message through DSPAM and then bounces it back if DSPAM > fails? .. If not, DSPAM handles the message and passes it over the > delivey agent? > > > >> I see here already that he is using old stuff from 3.6.8 (the chained part > >> in feature) but that is not so important. I mean it will fill up his log > >> but it's not the core of his problem. > >> > >> > >> > >>> Can you check for the definition of $CONFIG{'DSPAM_ARGS'} in your webui > >>> configuration file? > >>> > >>> > >> $CONFIG{'DSPAM_ARGS'} = "--deliver=innocent --class=innocent " . > >> "--source=error --user %CURRENT_USER% -d %u"; > >> > >> > >> > > > The whole problem can be right here. I'm assuming that DSPAM is handling > the messages and pass them over to TrustedDeliveryAgent. Problem is that > there's > > TrustedDeliveryAgent "/home/vpopmail/bin/dspamdel.sh" # Gary > TrustedDeliveryAgent "/usr/bin/maildrop" # Maildrop > #TrustedDeliveryAgent "/usr/local/sbin/exim -oMr spam-scanned" # Exim > # > TrustedDeliveryAgent "/usr/bin/procmail" > TrustedDeliveryAgent "/var/qmail/bin/sendmail" > UntrustedDeliveryAgent "/usr/bin/safecat Maildir/tmp Maildir/new" > > in dspam.conf. > > Which is used? the first? If so, what does > /home/vpopmail/bin/dspamdel.sh do? > > ... and who is Gary!? =D > > > >>> What is the role of the qmail server in the email infra-structure? Is it > >>> just a relay (MX which delivers into a backend server)? Is it a server > >>> that also holds the users maildirs/mailboxes? > >>> > >>> > >> I can't answer this for you. > >> > >> > >> > > > Looks like an all-in-one machine. > > > >>> Sorry for all the questions but the price to pay for using flexible > >>> software is that there are so many ways to get things done that one has > >>> to be familiar with the type of setup. > >>> > >>> > >>> Regards, > >>> > >>> Hugo Monteiro. > >>> > >>> > >> -- > >> Kind Regards from Switzerland, > >> > >> Stevan Bajić > >> > >> > > > Thanks for the help Steve ;) > Now I need your QMail help. The problem Daniel has, has nothing to do with DSPAM. Anyway... I fixed the issue for him by writing a custom filter as a shell script that is used when releasing from quarantine. Now here comes my problem. I use vpopmail (he uses that) to deliver the mail and unfortunately that beast is calling DSPAM again on the released message and in case that DSPAM is again tagging the message as spam, the message will be put again back to quarantine. I don't know how to work around that issue? I am in no way a QMail specialist. For me this QMail thing just looks very strange. .qmail file there, .qmail-default file there and there, etc... all is somehow glued together with those files. I find that ulta complicated and hard to manage. Anyway... do you know how I can instruct vpopmail or QMail to just deliver a message and NOT honor those .qmail-xxxx files? > > > R's, > > Hugo Monteiro. > > > >> > >>>> ----------------------------------------------- > >>>> Daniel Sánchez Pearson > >>>> > >>>> Hacheté Diseños Web > >>>> > >>>> danielsanc...@hachete.com <mailto:danielsanc...@hachete.com> > >>>> > >>>> http://www.hachete.com > >>>> > >>>> Móvil: 607 554527 > >>>> Fijo: 968 248335 > >>>> > >>>> ----- Original Message ----- > >>>> *From:* Paul Cockings <mailto:ds...@cytringan.co.uk> > >>>> *To:* "Daniel Sánchez Pearson [Hacheté Diseños Web]" > >>>> <mailto:danielsanc...@hachete.com> > >>>> *Cc:* dspam-user@lists.sourceforge.net > >>>> <mailto:dspam-user@lists.sourceforge.net> > >>>> *Sent:* Monday, November 23, 2009 9:45 PM > >>>> *Subject:* Re: [Dspam-user] Retrained emails don't get delivered > >>>> to user's inbox > >>>> > >>>> Daniel Sánchez Pearson [Hacheté Diseños Web] wrote: > >>>> > >>>>> - I can install CentOS and run a few commands, but don't know how > >>>>> qmail works, for example. I know about mysql, but I'm not > >>>>> familiar with the command line. > >>>>> - What OS/Arch are you running: CentOS release 5.4 (Final) > >>>>> - Roughly what hardware: Dual Xeon 2.5GHz, 8GB RAM, 2 x 73SAS > >>>>> disks on a Dell Perc RAID 5 > >>>>> - How long has this server been running: roughly, 2 years > >>>>> - What MTA - postfix? qmail? sendmail?: qmail > >>>>> - Which Dspam version (do dspam --version and post the output to > >>>>> this list): 3.8.0 > >>>>> - Which Backend storage driver do you use > >>>>> - Post your Dspam.conf (*** the passwords): > >>>>> http://www.hachete.com/dspam.conf > >>>>> - Which http server do you use: Apache > >>>>> - How much traffic is handled by this server user/domains: around > >>>>> 500GB/month on 187 domains > >>>>> - Can you describe how your setup is 'strung' together? ie is it > >>>>> a gateway filter etc: It's a server with Interworx control panel > >>>>> and the same server sends and receives email > >>>>> - Anything else running on the server: > >>>>> > >>>> Can you post the full output from dspam --version (it will show > >>>> which build options were used) > >>>> I assume CentOS x86_64 (aka 64 bit?) > >>>> > >>>> Do you know if dspam was installed from rpm/package or from source? > >>>> > >>>> ------------------------------------------------------------------------ > >>>> > >>>> ------------------------------------------------------------------------------ > >>>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 > >>>> 30-Day > >>>> trial. Simplify your report design, integration and deployment - and > >>>> focus on > >>>> what you do best, core application coding. Discover what's new with > >>>> Crystal Reports now. http://p.sf.net/sfu/bobj-july > >>>> ------------------------------------------------------------------------ > >>>> > >>>> _______________________________________________ > >>>> Dspam-user mailing list > >>>> Dspam-user@lists.sourceforge.net > >>>> https://lists.sourceforge.net/lists/listinfo/dspam-user > >>>> > >>>> > >>> -- > >>> ci.fct.unl.pt:~# cat .signature > >>> > >>> Hugo Monteiro > >>> Email : hugo.monte...@fct.unl.pt > >>> Telefone : +351 212948300 Ext.15307 > >>> Web : http://hmonteiro.net > >>> > >>> Centro de Informática > >>> Faculdade de Ciências e Tecnologia da > >>> Universidade Nova de Lisboa > >>> Quinta da Torre 2829-516 Caparica Portugal > >>> Telefone: +351 212948596 Fax: +351 212948548 > >>> www.ci.fct.unl.pt ap...@fct.unl.pt > >>> > >>> ci.fct.unl.pt:~# _ > >>> > >>> > >>> ------------------------------------------------------------------------------ > >>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 > >>> 30-Day > >>> trial. Simplify your report design, integration and deployment - and > >>> focus on > >>> what you do best, core application coding. Discover what's new with > >>> Crystal Reports now. http://p.sf.net/sfu/bobj-july > >>> _______________________________________________ > >>> Dspam-user mailing list > >>> Dspam-user@lists.sourceforge.net > >>> https://lists.sourceforge.net/lists/listinfo/dspam-user > >>> > >>> > >> ------------------------------------------------------------------------------ > >> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 > >> 30-Day > >> trial. Simplify your report design, integration and deployment - and focus > >> on > >> what you do best, core application coding. Discover what's new with > >> Crystal Reports now. http://p.sf.net/sfu/bobj-july > >> _______________________________________________ > >> Dspam-user mailing list > >> Dspam-user@lists.sourceforge.net > >> https://lists.sourceforge.net/lists/listinfo/dspam-user > >> > > > > ------------------------------------------------------------------------------ > > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > > trial. Simplify your report design, integration and deployment - and focus > > on > > what you do best, core application coding. Discover what's new with > > Crystal Reports now. http://p.sf.net/sfu/bobj-july > > _______________________________________________ > > Dspam-user mailing list > > Dspam-user@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/dspam-user > > > > > -- > ci.fct.unl.pt:~# cat .signature > > Hugo Monteiro > Email : hugo.monte...@fct.unl.pt > Telefone : +351 212948300 Ext.15307 > Web : http://hmonteiro.net > > Centro de Informática > Faculdade de Ciências e Tecnologia da > Universidade Nova de Lisboa > Quinta da Torre 2829-516 Caparica Portugal > Telefone: +351 212948596 Fax: +351 212948548 > www.ci.fct.unl.pt ap...@fct.unl.pt > > ci.fct.unl.pt:~# _ > > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
