Hi all!
I am totally stuck with dspam in my Ubuntu 10.10. Everything works well
except that my configuration is set to put spam emails in quarantine but
they are always delivered to the users as if the option "Deliver the message
normally with a X-DSPAM-Result header" would be chosen.
The emails are taken from postfix to dspam and returned to postfix again.
Here is my configuration:
#> grep -v "#" /etc/dspam/dspam.conf | sed -e '/^$/d'
Home /var/spool/dspam
StorageDriver /usr/lib/dspam/libmysql_drv.so
DeliveryHost 127.0.0.1
DeliveryPort 10025
DeliveryIdent localhost
DeliveryProto SMTP
OnFail error
Trust root
Trust dspam
Trust mail
Trust mailnull
Trust smmsp
Trust daemon
Trust postfix
Trust www-data
Trust dovecot
Trust clamav
Debug *
DebugOpt process spam fp
TrainingMode teft
TestConditionalTraining on
Feature noise
Feature whitelist
Algorithm graham burton
PValue graham
Preference "spamAction=quarantine"
Preference "showFactors=off"
Preference "tagNonspam=off"
Preference "spamSubject=[SPAM]"
AllowOverride enableBNR
AllowOverride enableWhitelist
AllowOverride fallbackDomain
AllowOverride ignoreGroups
AllowOverride ignoreRBLLookups
AllowOverride localStore
AllowOverride makeCorpus
AllowOverride optIn
AllowOverride optOut
AllowOverride optOutClamAV
AllowOverride processorBias
AllowOverride RBLInoculate
AllowOverride showFactors
AllowOverride signatureLocation
AllowOverride spamAction
AllowOverride spamSubject
AllowOverride statisticalSedation
AllowOverride storeFragments
AllowOverride tagNonspam
AllowOverride tagSpam
AllowOverride trainPristine
AllowOverride trainingMode
AllowOverride whitelistThreshold
AllowOverride dailyQuarantineSummary
AllowOverride notifications
IgnoreHeader Accept-Language
IgnoreHeader Authentication-Results
IgnoreHeader Content-Type
IgnoreHeader DKIM-Signature
IgnoreHeader Date
IgnoreHeader DomainKey-Signature
IgnoreHeader Importance
IgnoreHeader In-Reply-To
IgnoreHeader List-Archive
IgnoreHeader List-Help
IgnoreHeader List-Id
IgnoreHeader List-Post
IgnoreHeader List-Subscribe
IgnoreHeader List-Unsubscribe
IgnoreHeader Message-ID
IgnoreHeader Message-Id
IgnoreHeader Organization
IgnoreHeader Received
IgnoreHeader Received-SPF
IgnoreHeader References
IgnoreHeader Reply-To
IgnoreHeader Resent-Date
IgnoreHeader Resent-From
IgnoreHeader Thread-Index
IgnoreHeader Thread-Topic
IgnoreHeader User-Agent
IgnoreHeader X-policyd-weight
IgnoreHeader thread-index
LocalMX www.inside.es
SystemLog on
UserLog on
Opt out
TrackSources spam
ParseToHeaders on
ChangeModeOnParse on
ChangeUserOnParse full
MaxMessageSize 4194304
ClamAVPort 3310
ClamAVHost 127.0.0.1
ClamAVResponse reject
ServerPID /var/run/dspam/dspam.pid
ServerMode auto
ProcessorBias on
Include /etc/dspam/dspam.d/
#> grep -v "#" /etc/dspam/default.prefs | sed -e '/^$/d'
trainingMode=TEFT
spamAction=quarantine
spamSubject=[SPAM]
enableBNR=on
enableWhitelist=on
statisticalSedation=5
signatureLocation=headers
whitelistThreshold=10
showFactors=off
#> dspam --version
DSPAM Anti-Spam Suite 3.6.8 (agent/library)
Copyright (c) 2002-2006 Jonathan A. Zdziarski
http://dspam.nuclearelephant.com
DSPAM may be copied only under the terms of the GNU General Public License,
a copy of which can be found with the DSPAM distribution kit.
Configuration parameters: --host=x86_64-linux-gnu --build=x86_64-linux-gnu
--prefix=/usr --includedir=/usr/include --mandir=/usr/share/man
--infodir=/usr/share/info --with-logdir=/var/log/dspam/ --localstatedir=/var
--libexecdir=/usr/lib/dspam --srcdir=.. --with-dspam-home=/var/spool/dspam
--sysconfdir=/etc/dspam --enable-domain-scale --enable-signature-headers
--with-delivery-agent=/usr/bin/procmail --enable-daemon
--with-mysql-includes=/usr/include/mysql
--with-pgsql-includes=/usr/include/postgresql
--with-storage-driver=libdb4_drv,mysql_drv,pgsql_drv,sqlite3_drv,hash_drv
--enable-ldap --enable-debug --enable-virtual-users
--enable-preferences-extension --enable-clamav
## A sample of /var/log/dspam/dspam.debug
32405: [09/26/2011 11:04:25] using Graham factors
32405: [09/26/2011 11:04:25] Result Confidence: 0.85
32405: [09/26/2011 11:04:25] Control: [10 10] [11 10] Delta: [1 0]
32405: [09/26/2011 11:04:25] saving signature as 2,4e804019324051561628829
32405: [09/26/2011 11:04:25] libdspam returned probability of 1.000000
32405: [09/26/2011 11:04:25] message result: SPAM
32405: [09/26/2011 11:04:25] Establishing connection to 127.0.0.1:10025
32405: [09/26/2011 11:04:25] Connection established
32405: [09/26/2011 11:04:25] DSPAM Instance Shutdown. Exit Code: 0
As you can see, it is returning the spam to Postfix on port 10025 and I
can't understand why. Checking again the config for this user it says on
dspam.cgi: "Message Handling: Quarantine the message".
I have double checked all the permissions.
I will appreciate any hint to have this working as it should be.
Thank you very much,
Sergio Rael
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
