On Mon, 26 Sep 2011, Sergio Rael wrote:
Hi all!
I am totally stuck with dspam in my Ubuntu 10.10. Everything works well except
that my configuration is set to put spam emails in quarantine but they are
always
delivered to the users as if the option "Deliver the message normally with a
X-DSPAM-Result header" would be chosen.
The emails are taken from postfix to dspam and returned to postfix again. Here
is my configuration:
#> grep -v "#" /etc/dspam/dspam.conf | sed -e '/^$/d'
Home /var/spool/dspam
StorageDriver /usr/lib/dspam/libmysql_drv.so
DeliveryHost 127.0.0.1
DeliveryPort 10025
DeliveryIdent localhost
DeliveryProto SMTP
OnFail error
Trust root
Trust dspam
Trust mail
Trust mailnull
Trust smmsp
Trust daemon
Trust postfix
Trust www-data
Trust dovecot
Trust clamav
Debug *
DebugOpt process spam fp
TrainingMode teft
TestConditionalTraining on
Feature noise
Feature whitelist
Algorithm graham burton
PValue graham
Preference "spamAction=quarantine"
Preference "showFactors=off"
Preference "tagNonspam=off"
Preference "spamSubject=[SPAM]"
AllowOverride enableBNR
AllowOverride enableWhitelist
AllowOverride fallbackDomain
AllowOverride ignoreGroups
AllowOverride ignoreRBLLookups
AllowOverride localStore
AllowOverride makeCorpus
AllowOverride optIn
AllowOverride optOut
AllowOverride optOutClamAV
AllowOverride processorBias
AllowOverride RBLInoculate
AllowOverride showFactors
AllowOverride signatureLocation
AllowOverride spamAction
AllowOverride spamSubject
AllowOverride statisticalSedation
AllowOverride storeFragments
AllowOverride tagNonspam
AllowOverride tagSpam
AllowOverride trainPristine
AllowOverride trainingMode
AllowOverride whitelistThreshold
AllowOverride dailyQuarantineSummary
AllowOverride notifications
IgnoreHeader Accept-Language
IgnoreHeader Authentication-Results
IgnoreHeader Content-Type
IgnoreHeader DKIM-Signature
IgnoreHeader Date
IgnoreHeader DomainKey-Signature
IgnoreHeader Importance
IgnoreHeader In-Reply-To
IgnoreHeader List-Archive
IgnoreHeader List-Help
IgnoreHeader List-Id
IgnoreHeader List-Post
IgnoreHeader List-Subscribe
IgnoreHeader List-Unsubscribe
IgnoreHeader Message-ID
IgnoreHeader Message-Id
IgnoreHeader Organization
IgnoreHeader Received
IgnoreHeader Received-SPF
IgnoreHeader References
IgnoreHeader Reply-To
IgnoreHeader Resent-Date
IgnoreHeader Resent-From
IgnoreHeader Thread-Index
IgnoreHeader Thread-Topic
IgnoreHeader User-Agent
IgnoreHeader X-policyd-weight
IgnoreHeader thread-index
LocalMX www.inside.es
SystemLog on
UserLog on
Opt out
TrackSources spam
ParseToHeaders on
ChangeModeOnParse on
ChangeUserOnParse full
MaxMessageSize 4194304
ClamAVPort 3310
ClamAVHost 127.0.0.1
ClamAVResponse reject
ServerPID /var/run/dspam/dspam.pid
ServerMode auto
ProcessorBias on
Include /etc/dspam/dspam.d/
#> grep -v "#" /etc/dspam/default.prefs | sed -e '/^$/d'
trainingMode=TEFT
spamAction=quarantine
spamSubject=[SPAM]
enableBNR=on
enableWhitelist=on
statisticalSedation=5
signatureLocation=headers
whitelistThreshold=10
showFactors=off
#> dspam --version
DSPAM Anti-Spam Suite 3.6.8 (agent/library)
Copyright (c) 2002-2006 Jonathan A. Zdziarski
http://dspam.nuclearelephant.com
DSPAM may be copied only under the terms of the GNU General Public License,
a copy of which can be found with the DSPAM distribution kit.
Configuration parameters: --host=x86_64-linux-gnu --build=x86_64-linux-gnu
--prefix=/usr --includedir=/usr/include --mandir=/usr/share/man
--infodir=/usr/share/info
--with-logdir=/var/log/dspam/ --localstatedir=/var --libexecdir=/usr/lib/dspam
--srcdir=.. --with-dspam-home=/var/spool/dspam --sysconfdir=/etc/dspam
--enable-domain-scale --enable-signature-headers
--with-delivery-agent=/usr/bin/procmail --enable-daemon
--with-mysql-includes=/usr/include/mysql
--with-pgsql-includes=/usr/include/postgresql
--with-storage-driver=libdb4_drv,mysql_drv,pgsql_drv,sqlite3_drv,hash_drv
--enable-ldap --enable-debug
--enable-virtual-users --enable-preferences-extension --enable-clamav
## A sample of /var/log/dspam/dspam.debug
32405: [09/26/2011 11:04:25] using Graham factors
32405: [09/26/2011 11:04:25] Result Confidence: 0.85
32405: [09/26/2011 11:04:25] Control: [10 10] [11 10] Delta: [1 0]
32405: [09/26/2011 11:04:25] saving signature as 2,4e804019324051561628829
32405: [09/26/2011 11:04:25] libdspam returned probability of 1.000000
32405: [09/26/2011 11:04:25] message result: SPAM
32405: [09/26/2011 11:04:25] Establishing connection to 127.0.0.1:10025
32405: [09/26/2011 11:04:25] Connection established
32405: [09/26/2011 11:04:25] DSPAM Instance Shutdown. Exit Code: 0
As you can see, it is returning the spam to Postfix on port 10025 and I can't
understand why. Checking again the config for this user it says on dspam.cgi:
"Message
Handling: Quarantine the message".
I have double checked all the permissions.
I will appreciate any hint to have this working as it should be.
Thank you very much,
Sergio Rael
Hi
Do you really need: AllowOveride=SpamAction, SpamSubject, SignatureLocation. I've would
at least try to comment out SpamAction. Also try to set LocalMX 127.0.0.1
and serverIdent "localhost". To completly rule out any premission problem,
stop DSPAM. Navigate to /Path/to/user.mbox, backup before delete/move
anything. Remove /var/run/dspam.pid if still exist and restart DSPAM.
Double check uid & gid is correct set in mysql.
I also have TrackSources set like this
TrackSources spam ham
sincerely,
Andreas
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
