On Jun 23, 2010, at 9:35 AM, Terry Barnum wrote:

> Hi Michael,
> 
> On Jun 22, 2010, at 6:58 PM, Michael Alger wrote:
> 
>> On Tue, Jun 22, 2010 at 05:16:54PM -0700, Terry Barnum wrote:
>>> Ironically, email sent to me from the spam-l mailing list is
>>> getting lost. DSPAM complains that it can't find a valid signature
>>> and drops it. LMTP says it delivered it, but it's not making it to
>>> my inbox. All other email appears to be getting delivered (but now
>>> I'm nervous since it seems to be a silent problem.)
>>> 
>>> Any ideas? How can I try to figure out what's going on? 
>> 
>> It looks like dspam is trying to retrain the message. Otherwise,
>> there's no reason for it to care about a signature.
>> 
>> What method do you use for retraining messages? Is it possible it's
>> accidentally being triggered by these messages? The sender and
>> client hostname will both match a /^spam-/ pattern, so maybe
>> something was specified in a manner which might be matching things
>> it's not supposed to.
> 
> I don't believe it's retraining at delivery time. The retraining happens 
> every evening via a cron job that checks for false positives and false 
> negatives in users' Junk NotJunk mail folders. Not the most ideal way I 
> realize, but I've been setting up the mailserver in baby steps and this has 
> been working.
> 
> Is it possible that dspam is getting confused by the sender address? 
> <spam-l-boun...@spam-l.com> ?

To add to the retraining thought, here's a snippet of last night's postfix log 
when the retraining script runs showing hundreds of these:

<snip>
3943242-Jun 23 03:15:08 mailbox dspam[77221]: Signature retrieval for 
'7,4c0d15ac628662028612963' failed
3943339-Jun 23 03:15:08 mailbox dspam[77221]: Unable to find a valid signature. 
Aborting.
3943421:Jun 23 03:15:08 mailbox dspam[77221]: process_message returned error 
-5.  dropping message.
3943513-Jun 23 03:15:08 mailbox dspam[77223]: Signature retrieval for 
'7,4c0d1a1a628661645817329' failed
3943610-Jun 23 03:15:08 mailbox dspam[77223]: Unable to find a valid signature. 
Aborting.
3943692:Jun 23 03:15:08 mailbox dspam[77223]: process_message returned error 
-5.  dropping message.
3943784-Jun 23 03:15:08 mailbox dspam[77225]: Signature retrieval for 
'7,4c0d2ceb628662080616469' failed
3943881-Jun 23 03:15:08 mailbox dspam[77225]: Unable to find a valid signature. 
Aborting.
3943963:Jun 23 03:15:08 mailbox dspam[77225]: process_message returned error 
-5.  dropping message.
<snip>

I am running the mysql purge-4.1.sql nightly and it returns this output:

Table   Op      Msg_type        Msg_text
xyz.dspam_token_data    optimize        status  OK
xyz.dspam_signature_data        optimize        status  OK


>> Is the "dspam-lmtp" filter that delivers via /tmp/dspam.sock
>> definitely only classifying messages, or could it be retraining
>> them?
> 
> Here's the dspam-lmtp filter line:
> 
> /./   FILTER dspam-lmtp:unix:/var/run/dspam.sock
> 
>> If your dspamd was compiled with debug mode enabled you might also
>> try running it with debugging enabled while you pass it a message
>> from spam-l, to see what configuration it's picking up via LMTP.
> 
> Good idea, I'll give it a shot.

Thanks,
-Terry


------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user

Reply via email to