dspam --version:
DSPAM Anti-Spam Suite 3.9.0 (agent/library)
Configuration parameters: '--prefix=/usr' '--sysconfdir=/etc'
'--with-logdir=/var/dspam' '--enable-debug' '-ith-storage-driver=mysql_drv'
'--with-mysql-includes=/usr/include/mysql' '--with-mysql-libraries=/usr/lib'
'-nable-virtual-users' '--enable-preferences-extension'
'--enable-signature-headers' '--enable-clamav'
My webserver runs under (apache).
/var/www/html/spam/* is owned by dspam:dspam
/var/dspam/* is dspam:dspam
trusted.users:
root
mail
smmsp
nobody
/etc/dspam.conf:
Trust root
Trust dspam
Trust apache
Trust mail
Trust mailnull
Trust smmsp
Trust daemon
Email from quarantine:
Return-Path: <john...@mydomain.com>
Received: from mydomain.com (localhost [127.0.0.1])
by mydomain.com (8.13.1/8.13.1) with ESMTP id o3FNfvpP026065
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for <i...@mydomain.com>; Thu, 15 Apr 2010 16:41:58 -0700
Received: (from apa...@localhost)
by mydomain.com (8.13.1/8.13.1/Submit) id o3FNfvaN026063;
Thu, 15 Apr 2010 16:41:57 -0700
X-Authentication-Warning: mydomain.com: apache set sender to
john...@mydomain.com using -f
Received: from xx.xx.xx.xx
(SquirrelMail authenticated user john_es)
by mail.mydomain.com with HTTP;
Thu, 15 Apr 2010 16:41:57 -0700 (PDT)
Message-ID: <3219.xx.xx.xx.xx.1271374917.squir...@mail.mydomain.com>
Date: Thu, 15 Apr 2010 16:41:57 -0700 (PDT)
Subject: vorii
From: "John" <john...@mydomain.com>
To: i...@mydomain.com
User-Agent: SquirrelMail/1.4.8-5.el4.centos.8
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20100415164157_45456"
X-Priority: 3 (Normal)
Importance: Normal
Received-SPF: pass (mydomain.com: domain of john...@mydomain.com designates
127.0.0.1 as permitted sender) receiver=mydomain.com; client-ip=127.0.0.1;
helo=mydomain.com; envelope-from=john...@mydomain.com; x-software=spfmilter
0.97 http://www.acme.com/software/spfmilter/ with libspf2-1.0.0;
X-DSPAM-Result: Virus
X-DSPAM-Processed: Thu Apr 15 16:41:58 2010
X-DSPAM-Confidence: 1.0000
X-DSPAM-Improbability: 1 in 98689407 chance of being ham
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: 1,4bc7a446260717932813595
------=_20100415164157_45456
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
f
!DSPAM:1,4bc7a446260717932813595!
------=_20100415164157_45456
Content-Type: application/force-download; name="eicar_com.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="eicar_com.zip"
<test virus snippet was here but i had to tkae it out or yahoo wouldnt not send
it...>
------=_20100415164157_45456--
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user