On Sat, 17 Apr 2010 04:16:01 -0700 (PDT) john espiro <john_esp...@yahoo.com> wrote:
> does the message get delivered? > > No (I sent you another message with a weird line in the dspam.debug file, > hopefully you got it. > I got the message and wrote back but used the DSPAM mailing list instead of writing directly to you. The problem is however that currently SourceForge mailing lists are down (they announced this a bunch of weeks ago). Anyway... here my response: ------------------------------------ okay. The signature is not correctly displayed. Maybe I made an error yesterday when allocating the signature. However... is the message delivered after that or is it still dropped? ------------------------------------ [...] > I am a bit torn on it. dspam is not processing the file (ie no tokens, etc). > Correct. > So I am not sure it should affect the dspam statistics in that case. > It should. For two reasons: 1) When DSPAM tagged the message as Virus the statistics got updated -> +1 for TP 2) You explicitly release it (aka: you tell DSPAM: No! It is not TP it is a FP) > But I don't have the background in programming dspam that you and others have. > It is not a question of programming. It's more a question of keeping track of what happened on the system. You have send that eicar test file to your normal account and it was correctly tagged as an Virus. Now you go into the quarantine and say that it should be released. From DSPAMs viewpoint the following happened: mail arrives and ClamAV is saying it is a Virus. DSPAM reads configuration and sees that it should deliver the message into the quarantine. DSPAM gets instruction (from you) to deliver the message from quarantine. DSPAM delivers the message. DSPAM has no clue that you wanted to deliver a Virus infected mail just for testing. For DSPAM the situation is simple: Spam/Blacklisted/Blocklisted/Virus mails get delivered into quarantine => TP. Releasing from quarantine is then automatically a FP. > Might be an interesting discussion on the dspam list.... Because if the > sender is on the white list and clamav decides to quarantine the file, etc. > > [...] > Yes, I remember now :) > :) -- Kind Regards from Switzerland, Stevan Bajić ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
