Re: [Dspam-user] Delivering emails twice

Christoph Pleger Tue, 27 Dec 2011 01:01:03 -0800

Hello,

>> No, it is from here: http://hg.dovecot.org/dovecot-antispam-plugin
> Aha! Please post the config and what version are you using of the
> Dovecot Antispam-Plugin?


I am using the most recent version, the one that can currently be
downloaded from that location.

My configuration is like follows:

plugin {
  antispam_backend              =  SPOOL2DIR
  antispam_spam                 =  Spam
  antispam_trash                =  Trash
  antispam_spool2dir_spam       =  %h/spam/%%020lu-%%05lu
  antispam_spool2dir_notspam    =  %h/ham/%%020lu-%%05lu
}

I have attached a file (with minor modifications) that has been created in
a user's spam subdirectory after moving an email to the Spam folder.

Regards
  Christoph

no
        *      trust
        *      [98.138.90.90 listed in list.dnswl.org]
        *  1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
        *      [URIs: sonohnumeral.com]
        *  0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail 
provider
        *      (pontbriand17dottie[at]ymail.com)
        *  0.0 HTML_MESSAGE BODY: HTML included in message
        *  2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
        *      above 50%
        *      [cf: 100]
        *  0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
        *      [cf: 100]
        *  1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
        *  0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Received: from nm27.bullet.mail.ne1.yahoo.com (nm27.bullet.mail.ne1.yahoo.com 
[98.138.90.90])
        by mail.plmail.de (Postfix) with SMTP id 56A009E056
        for <christ...@plmail.de>; Tue, 27 Dec 2011 02:04:54 +0100 (CET)
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 27 
Dec 2011 01:04:53 -0000
Received: from [98.138.88.238] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 27 
Dec 2011 01:04:53 -0000
Received: from [127.0.0.1] by omp1038.mail.ne1.yahoo.com with NNFMP; 27 Dec 
2011 01:04:53 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 57314.11816...@omp1038.mail.ne1.yahoo.com
Received: (qmail 87201 invoked by uid 60001); 27 Dec 2011 01:04:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; 
t=1324947892; bh=tugAhqtjRVOEvGfCmds7Wh2W57VWSpkuOTTElbHLQlc=; 
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
 
b=LXYdhH4zGtqMIPXtR9e17RADbD9aTAWk4okvohvLg1cpN3zeGaZYLbSonxIDBhQU02zGRvFD0ZnU7BjbrDX58E7ZjIefrSWd8mucFLD+ERFTnc+3B9Vq0i8X6Gjwb8gYTxdovlBCUZH1NRNG4c6FWla11GQsNfAunXDZLIqZZX0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=ymail.com;
  
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
  
b=nHGX+vHrT4ST5T7+Un+rMgFRGVYfGQSNq18zKNGItuCh+mVUJzP6p7trEcQwbs8AF+DGTV39Ac1elqhZ/sasOwIIYRicoOe7Nml/ZQmE5EzFi7CqWc3HTKbrE8aDKMMxXPLw0xRUkq0IdpCgyKojHlKvtHVQOPAoLuUU9kT72NM=;
X-YMail-OSG: 9f0l1MIVM1lZuVB4NuEhqitSEr3Rg2Nsk7xQvT2B__p1EtV
 H8_JiSjSKlDfAvQmMUBPkB_jXPFxOXbhIBgxj7JQU5.33vXZ1gKHEBN.PFna
 7aslPl288UDKyC79W.F60ilfrGRI94g.UJHubvaYNtASrGb3vCUY_RABY1nj
 Nk0r9C0I.Qekldf9jBealUk7XKD6ZHTSiQMHdOadlJvvtZfMlSBUYyRCgxDg
 XEMs3lr68ka5LPd7ltCfnVYqgjdJOAKB.7.PyqS5QZ5A9kMrZWkDBPN2Rabf
 LUjdmD2WFn23CCkM8YCUHDSQJWFhMXVyrBDEHId1UuVp_i7FjULNvX2zxBA7
 h.rU0vEeA3zTioAUOJ_JGSdQIbEew5LT0IQabwCEuKug7B2GAjwWCacNdZrP
 Y0VVDPDh7E3_JnjljSgNQcQiur5G2Ybs_fcWi8NFfbh9IeIcU.B1lzd2.PH9
 0BarPg3xpF4x87ctvehSGRPgL.JZI4UQBVt6IEP58_WjQDoXbOabf9uBvXNO
 qeKVuioixbY0MTJ70Rx.djoIqLpJjXYJsexmZJ1gmOl4xL00rZPRaMRv431x
 DquVvgukqV.7eb9okGgqU0cE29KqPykE049.gx_Kak2QZdocWbSVczaAIAoi
 X8ud6FWsVVbVfgl7anbYd_sIzIcepApsm0poNub.RPU6JGOK9p8E-
Received: from [85.61.5.48] by web124917.mail.ne1.yahoo.com via HTTP; Mon, 26 
Dec 2011 17:04:52 PST
X-Mailer: YahooMailWebService/0.8.115.331698
Message-ID: <1324947892.85938.yahoomail...@web124917.mail.ne1.yahoo.com>
Date: Mon, 26 Dec 2011 17:04:52 -0800 (PST)
From: *****************
Reply-To: **********************
Subject: FW:CutedAndWcildBhruwnetteeJaimejHammefrShowfingfOff for an enemy and 
attacked him
To: ******************,
    ******************,
  christ...@plmail.de
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
MIME-Version: 1.0
Content-Type: multipart/alternative; 
boundary="MIMEStream=_0+288036_18230892819543_7334696464"
X-Virus-Status: No
X-Virus-Checker-Version: ClamAV 0.97.3/14193/Mon Dec 26 00:22:59 2011 
signatures 54.14193
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Tue Dec 27 02:05:10 2011
X-DSPAM-Confidence: 0.5605
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 4ef919c65051054842985


--MIMEStream=_0+288036_18230892819543_7334696464
Content-Type: text/plain; charset="us-ascii"

Thanks? It is impatient ye are again, Narm! The task's not done yet.


 http://yoshizawa.sonohnumeral.com?b9nm41dwmbtgt:FpfR
Villanueva frowned   in his house.

--MIMEStream=_0+288036_18230892819543_7334696464
Content-Type: text/html; charset="us-ascii"

<html><body><p><DEFANGED_div style="color:#000; background-color:#fff; 
font-family:times new roman, new york, times, 
serif;font-size:8pt"><p><DEFANGED_div><DEFANGED_span>Thanks? It is impatient ye 
are again, Narm! The task's not done yet.<br><br><br> <a 
href="http://freeh.sonohnumeral.com?b9nm41dwmbtgt:FpfR";>http://yoshizawa.sonohnumeral.com?b9nm41dwmbtgt:FpfR</a><br>Villanueva
 frowned   in his 
house.</DEFANGED_span></p><DEFANGED_div></p><DEFANGED_div></body></html>
--MIMEStream=_0+288036_18230892819543_7334696464--

------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev

_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user

Re: [Dspam-user] Delivering emails twice

Reply via email to