Thanks for getting back to me. Now that we have Troys helping Troys the
world is in big trouble.
The only config I have in /etc/dspam/dspam.d/ is my mysql conf. I checked just
in case and it has no spamAction setting in there.
I checked the user's settings and she has spamAction=quarantine. Here's
her full config from /var/spool/dspam/data/[domain]/[user]/[user].prefs
trainingMode=TEFT
spamAction=quarantine
spamSubject=[SPAM]
statisticalSedation=0
enableBNR=on
optIn=off
optOut=off
showFactors=off
enableWhitelist=on
signatureLocation=message
/etc/dspam/default.prefs also has a spamAction of quarantine.
I think it's some basic setting I don't have turned on that enables dspam to
quarantine.
Here's what a spam looks like in the log:
1324488427 S "OrGreenic Natural Cookware"
<orgree...@securegridbackups.com> 4ef216eb71421784485046 Cook Without Oil,
Butter or Grease with OrGreenic! 0.076892 [user's email] Tagged
<7111466088970171208.1324957292a854a2686c7ee87e375c97.651008...@server.securegridbackups.com>
Thanks,
Troy
On Wed, 21 Dec 2011 12:06:02 -0600
Troy Ayers <dspam1...@wcta.net> wrote:
> Troy,
>
> Perhaps the user has their own override for spamaction since that is
> allowed in dspam.conf? AllowOverride spamAction spamSubject
>
>
> Also, The last line of you dspam.conf is:
> Include /etc/dspam/dspam.d/
> So perhaps inspect the contents of that directory, see if there is
> another Preference "spamAction=
> in there? I don't recall if dspam takes the first or last instance
> if you have something defined more than once, I presume it takes the
> last.
>
> -Troy
>
>
>
> On 12/21/2011 7:57 AM, Troy Vitullo wrote:
> > Hi,
> >
> > I have a fairly simple dspam set up, but I'm missing a key piece of
> > it.
> >
> > I've set dspam up to quarantine suspect messages but it's sending
> > them anyway (with a [SPAM] tag attached to them.) Here's my
> > relevant config settings in /etc/dspam/dspam.conf:
> >
> > ServerParameters "--deliver=innocent"
> > ServerIdent "localhost.localdomain"
> >
> > Here's what I have in /etc/postfix/master.cf:
> >
> > smtp inet n - n - - smtpd
> > -o content_filter=lmtp:unix:/var/spool/postfix/var/run/dspam.sock
> > 127.0.0.1:10026 inet n - - - - smtpd
> > -o content_filter=
> > -o
> > receive_override_options=no_unknown_recipient_checks,no_header_body_checks
> > -o smtpd_helo_restrictions= -o smtpd_client_restrictions=
> > -o smtpd_sender_restrictions=
> > -o smtpd_recipient_restrictions=permit_mynetworks,reject
> > -o mynetworks=127.0.0.0/8
> > -o smtpd_authorized_xforward_hosts=127.0.0.0/8
> >
> > postfix uses dovecot as an external delivery method to deliver mail:
> >
> > dovecot unix - n n - - pipe
> > flags=DRhu user=dovecot argv=/usr/lib/dovecot/deliver -d
> > ${recipient}
> >
> > I added this:
> > dspam unix - n n - 10 pipe
> > flags=Ru user=dspam argv=/usr/bin/dspam --deliver=innocent --user
> > $recipient -i -f $sender -- $recipient
> >
> > underneath but it looks like it still forwards spam instead of
> > quarantining it.
> >
> > The whole system was set up by somebody a lot smarter than I am, and
> > I'm trying to tack dspam onto the end of it, so thanks for humoring
> > a newb.
> >
> > Full dspam config:
> >
> > Home /var/spool/dspam
> > StorageDriver /usr/lib/dspam/libmysql_drv.so
> > TrustedDeliveryAgent "/usr/bin/procmail"
> > DeliveryHost 127.0.0.1
> > DeliveryPort 10026
> > DeliveryIdent localhost
> > DeliveryProto SMTP
> > OnFail error
> > Trust root
> > Trust dspam
> > Trust mail
> > Trust mailnull
> > Trust smmsp
> > Trust daemon
> > Debug *
> > TrainingMode teft
> > TestConditionalTraining on
> > Feature chained
> > Feature whitelist
> > Algorithm graham burton
> > PValue graham
> > Preference "spamAction=quarantine"
> > Preference "signatureLocation=message" # 'message' or 'headers'
> > Preference "showFactors=on"
> > Preference "spamSubject=SPAM"
> > AllowOverride trainingMode
> > AllowOverride spamAction spamSubject
> > AllowOverride statisticalSedation
> > AllowOverride enableBNR
> > AllowOverride enableWhitelist
> > AllowOverride signatureLocation
> > AllowOverride showFactors
> > AllowOverride optIn optOut
> > AllowOverride whitelistThreshold
> > HashRecMax 98317
> > HashAutoExtend on
> > HashMaxExtents 0
> > HashExtentSize 49157
> > HashMaxSeek 100
> > HashConnectionCache 10
> > Notifications off
> > PurgeSignatures 14 # Stale signatures
> > PurgeNeutral 90 # Tokens with neutralish probabilities
> > PurgeUnused 90 # Unused tokens
> > PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes)
> > PurgeHits1S 15 # Tokens with only 1 spam hit
> > PurgeHits1I 15 # Tokens with only 1 innocent hit
> > LocalMX 127.0.0.1
> > SystemLog on
> > UserLog on
> > Opt out
> > TrackSources spam
> > ParseToHeaders full
> > ChangeModeOnParse on
> > ChangeUserOnParse off
> > ServerPID /var/run/dspam.pid
> > ServerMode auto
> > ServerPass.Relay1 "secret"
> > ServerParameters "--deliver=innocent"
> > ServerIdent "localhost.localdomain"
> > ServerDomainSocketPath "/var/spool/postfix/var/run/dspam.sock"
> > ClientHost /var/spool/postfix/var/run/dspam.sock
> > ClientIdent "secret@Relay1"
> > ProcessorBias on
> > Include /etc/dspam/dspam.d/
> >
> > Troy
> >
> > ------------------------------------------------------------------------------
> > Write once. Port to many.
> > Get the SDK and tools to simplify cross-platform app development.
> > Create new or port existing apps to sell to consumers worldwide.
> > Explore the Intel AppUpSM program developer opportunity.
> > appdeveloper.intel.com/join http://p.sf.net/sfu/intel-appdev
> > _______________________________________________
> > Dspam-user mailing list
> > Dspam-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/dspam-user
> >
> >
>
>
>
> ------------------------------------------------------------------------------
> Write once. Port to many.
> Get the SDK and tools to simplify cross-platform app development.
> Create new or port existing apps to sell to consumers worldwide.
> Explore the Intel AppUpSM program developer opportunity.
> appdeveloper.intel.com/join http://p.sf.net/sfu/intel-appdev
> _______________________________________________
> Dspam-user mailing list
> Dspam-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>
> !DSPAM:4ef2188e71426665979073!
>
>
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create
new or port existing apps to sell to consumers worldwide. Explore the
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
