On 26/08/2012 23:25, Stevan Bajić wrote:
>> I am actually testing dspam because i need a more scalable
>> solution than spamassassin.
>> my actual setup is debian, postfix 2.7.1, dspam 3.10.2, dovecot,
>> postfixadmin, mysql db.
>>
>> the uid of the virtual_uids table is auto_increment, and i've created a
>> post-mailbox-add on postfixadmin to insert a new uid every time a new
>> mailbox is created
> This is okay but what is your policy regarding filtering? Opt In or Opt Out?
> I would suggest you run "Opt In" and use the preference extension and
> then add the preference "optIn on" and "optOut off"

Hello Stevan,
Thanks for the tip. Actually i did everything with a PHP script, but it 
works more or less in the same way;
dspam is working in "opt-out" mode, but it's ok to use optin and the 
preferences.

>> I have dspam configured as a transport
>>
>> dspam                 unix    -       n       n       -       - pipe
>>      flags=Ru user=dspam argv=/usr/bin/dspam --client --deliver=innocent
>> --user ${recipient} --mail-from=${sender}
> I have made bad experience in the past when calling the binary and not
> using the client/server mode. I know that the kind of issues I had in
> the past (many, many years ago) do not exist any more, but I now prefer
> using client/server mode than calling directly the binary.
Ok,
So it's better to use a -o content_filter=lmtp:unix:path/to/dspam.sock 
in the smtp service?

>
>> and i use check_client_access pcre in smtpd_client restrictions.
>>
>> /var/spool/dspam/group contains (and the Home in dspam.conf is correct)
>> global:shared:*
>>
>> There is a virtual uid on mysql dspam database named "global" with uid
>> 1, that i have trained with "dspam_train global spam ham" using some
>> spamasssin spam.
> The SA public corpus? With that you will not get very far. Getting corpi
> with spam is ultra easy ( for example:http://www.untroubled.org/spam/  )
> but getting ham is harder. So if you have a lot of ham laying around
> then I would suggest you to do more training with that ham data and use
> for spam data the stuff you download from the above link.

Thanks, i've followed here and there some (old) howto-s, actually that 
spam&ham is really old.


>
>
>> I have just one virtual user,"t...@lanserver.it"  for testing.
>>
>> dspam actually *works*, but it seems i'm unable to get the global group
>> work. I tried with merge and with shared but no way - even the debug
>> doesn't show me that the user is being "associated" to that group
>>
>> The stats are correct for the global group:
>>
>> global            TP:  2350 TN:   485 FP:    15 FN:   201 SC:     0
>> NC:     0
>> t...@lanserver.it   TP:     0 TN:     3 FP:     0 FN:     0 SC:     0
>> NC:     0
>>
>> Did I do something wrong? Misunderstood something?
> Don't know. Hard to tell with the information you provided. What would
> help is to post your dspam.conf.
> And another info you could provide to us is what you try to accomplish
> with groups? Do you want to accelerate accuracy? Do you want to minimize
> learning? etc, etc, etc.... what is your goal?

It's just strange, in posted logs i've seen the "user was associated to 
group xxx" but i'm not seeing anything like that.

My goal is to accelerate accuracy, all users use the same language and 
more or less the same type of mails, so i was thinking about a "global" 
group pre-trained with corpus, and re-train it with user's spam&ham that 
they put in their folders.
I know, dspam is absolutely not spamassassin: but i'm trying to 
accomplish the same things - users are not power users and they just 
don't want spam ( .. who wants?) just "out of the box"

Here is my dspam.conf:


Home /var/spool/dspam
StorageDriver /usr/lib/x86_64-linux-gnu/dspam/libmysql_drv.so
DeliveryHost        127.0.0.1
DeliveryPort        10026
DeliveryIdent       localhost
DeliveryProto       SMTP
EnablePlusedDetail  on
PlusedCharacter +
PlusedUserLowercase on
OnFail unlearn
Trust root
Trust dspam
Trust mail
Trust daemon
Trust vmail
TrainingMode teft
TestConditionalTraining on
Feature noise
Feature whitelist
Algorithm graham burton
Tokenizer osb
PValue bcr
WebStats on
AllowOverride enableBNR
AllowOverride enableWhitelist
AllowOverride fallbackDomain
AllowOverride ignoreGroups
AllowOverride ignoreRBLLookups
AllowOverride localStore
AllowOverride makeCorpus
AllowOverride optIn
AllowOverride optOut
AllowOverride optOutClamAV
AllowOverride processorBias
AllowOverride RBLInoculate
AllowOverride showFactors
AllowOverride signatureLocation
AllowOverride spamAction
AllowOverride spamSubject
AllowOverride statisticalSedation
AllowOverride storeFragments
AllowOverride tagNonspam
AllowOverride tagSpam
AllowOverride trainPristine
AllowOverride trainingMode
AllowOverride whitelistThreshold
AllowOverride dailyQuarantineSummary
AllowOverride notifications
IgnoreHeader Accept-Language
IgnoreHeader Authentication-Results
IgnoreHeader Content-Type
IgnoreHeader DKIM-Signature
IgnoreHeader Date
IgnoreHeader DomainKey-Signature
IgnoreHeader Importance
IgnoreHeader In-Reply-To
IgnoreHeader List-Archive
IgnoreHeader List-Help
IgnoreHeader List-Id
IgnoreHeader List-Post
IgnoreHeader List-Subscribe
IgnoreHeader List-Unsubscribe
IgnoreHeader Message-ID
IgnoreHeader Message-Id
IgnoreHeader Organization
IgnoreHeader Received
IgnoreHeader Received-SPF
IgnoreHeader References
IgnoreHeader Reply-To
IgnoreHeader Resent-Date
IgnoreHeader Resent-From
IgnoreHeader Thread-Index
IgnoreHeader Thread-Topic
IgnoreHeader User-Agent
IgnoreHeader X-policyd-weight
IgnoreHeader thread-index
Notifications   on
PurgeSignatures 14  # Stale signatures
PurgeNeutral    90  # Tokens with neutralish probabilities
PurgeUnused 90  # Unused tokens
PurgeHapaxes    30  # Tokens with less than 5 hits (hapaxes)
PurgeHits1S 15  # Tokens with only 1 spam hit
PurgeHits1I 15  # Tokens with only 1 innocent hit
LocalMX 127.0.0.1
SystemLog   on
UserLog     on
Opt in
TrackSources spam
ParseToHeaders on
ChangeModeOnParse on
ChangeUserOnParse on
Broken case
MaxMessageSize 1048576
ClamAVPort      3310
ClamAVHost      127.0.0.1
ClamAVResponse      accept
ServerQueueSize 32
ServerPID       /var/run/dspam/dspam.pid
ServerMode auto
ServerPass.mx1   "h7s40io3e7f60cn6i0qsihw5b0yhc4ns"
ServerParameters    "--deliver=innocent -d %u"
ServerIdent     "dspam.mx1.test"
ServerDomainSocketPath  "/var/run/dspam/dspam.sock"
ClientHost  /var/run/dspam/dspam.sock
ClientIdent "h7s40io3e7f60cn6i0qsihw5b0yhc4ns@mx1"
ProcessorURLContext on
ProcessorBias on
StripRcptDomain off
Include /etc/dspam/dspam.d/



> PS: I am from now on offline for about 14 days. I hope others on the
> list will help you.

Thanks again! and .. have nice vacation? :)


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user

Reply via email to