On Fri, 16 Apr 2010 00:16:15 -0700 (PDT) john espiro <john_esp...@yahoo.com> wrote:
> dspam --version: > > DSPAM Anti-Spam Suite 3.9.0 (agent/library) > Configuration parameters: '--prefix=/usr' '--sysconfdir=/etc' > '--with-logdir=/var/dspam' '--enable-debug' '-ith-storage-driver=mysql_drv' > this is a cut and paste error or a typo? should be IMHO '--with-storage-driver=mysql_drv' > '--with-mysql-includes=/usr/include/mysql' '--with-mysql-libraries=/usr/lib' > '-nable-virtual-users' '--enable-preferences-extension' > '--enable-signature-headers' '--enable-clamav' > > My webserver runs under (apache). > So the running username is "apache"? Or is it another user? Maybe "apache2" or "http" or "httpd"? > /var/www/html/spam/* is owned by dspam:dspam > > /var/dspam/* is dspam:dspam > > trusted.users: > root > mail > smmsp > nobody > Is this a file? I mean "trusted.users"? Where have you created that file? > /etc/dspam.conf: > Trust root > Trust dspam > Trust apache > Trust mail > Trust mailnull > Trust smmsp > Trust daemon > > > Email from quarantine: > > Return-Path: <john...@mydomain.com> > Received: from mydomain.com (localhost [127.0.0.1]) > by mydomain.com (8.13.1/8.13.1) with ESMTP id o3FNfvpP026065 > (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) > for <i...@mydomain.com>; Thu, 15 Apr 2010 16:41:58 -0700 > Received: (from apa...@localhost) > by mydomain.com (8.13.1/8.13.1/Submit) id o3FNfvaN026063; > Thu, 15 Apr 2010 16:41:57 -0700 > X-Authentication-Warning: mydomain.com: apache set sender to > john...@mydomain.com using -f > Received: from xx.xx.xx.xx > (SquirrelMail authenticated user john_es) > by mail.mydomain.com with HTTP; > Thu, 15 Apr 2010 16:41:57 -0700 (PDT) > Message-ID: <3219.xx.xx.xx.xx.1271374917.squir...@mail.mydomain.com> > Date: Thu, 15 Apr 2010 16:41:57 -0700 (PDT) > Subject: vorii > From: "John" <john...@mydomain.com> > To: i...@mydomain.com > User-Agent: SquirrelMail/1.4.8-5.el4.centos.8 > MIME-Version: 1.0 > Content-Type: multipart/mixed;boundary="----=_20100415164157_45456" > X-Priority: 3 (Normal) > Importance: Normal > Received-SPF: pass (mydomain.com: domain of john...@mydomain.com designates > 127.0.0.1 as permitted sender) receiver=mydomain.com; client-ip=127.0.0.1; > helo=mydomain.com; envelope-from=john...@mydomain.com; x-software=spfmilter > 0.97 http://www.acme.com/software/spfmilter/ with libspf2-1.0.0; > X-DSPAM-Result: Virus > X-DSPAM-Processed: Thu Apr 15 16:41:58 2010 > X-DSPAM-Confidence: 1.0000 > X-DSPAM-Improbability: 1 in 98689407 chance of being ham > X-DSPAM-Probability: 1.0000 > X-DSPAM-Signature: 1,4bc7a446260717932813595 > > ------=_20100415164157_45456 > Content-Type: text/plain; charset="utf-8" > Content-Transfer-Encoding: 8bit > > f > > > > > !DSPAM:1,4bc7a446260717932813595! > > ------=_20100415164157_45456 > Content-Type: application/force-download; name="eicar_com..zip" > Content-Transfer-Encoding: base64 > Content-Disposition: attachment; filename="eicar_com.zip" > > <test virus snippet was here but i had to tkae it out or yahoo wouldnt not > send it...> > ------=_20100415164157_45456-- > > > Okay. Just a testfie with eicar in it. I could reproduce this on my end. Give me some time. ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
