Hi all,
I'am new to DSPAM, I'm trying to migrate a server from
postfix+amavis+clamav+spamassassin+dovecot to
postfix+dspam+clamav+dovecot on ubuntu 12.04 server.
Everything works as expected, except for dspam:
1) mails are scanned, but all receive the same headers and none is set
to spam (spamassasin classifies it about 20 or 30 point). The headers
added are
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Tue Sep 11 01:45:52 2012
X-DSPAM-Confidence: 0.9923
X-DSPAM-Improbability: 1 in 12903 chance of being spam
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 1,504e7bb0309461840114335
X-DSPAM-Factors: 27,
Received*for+andrea, 0.00684,
Received*for+andrea, 0.00684,
Received*andrea+#+#+#+Sep, 0.00684,
Received*andrea+#+#+#+Sep, 0.00684,
Date*Sep+2012, 0.00684,
Received*borg.asidev.net+#+with, 0.00684,
Received*for+#+shinji.it, 0.00684,
Received*Sep+2012, 0.00684,
Received*Sep+2012, 0.00684,
Received*by+borg.asidev.net, 0.00684,
Received*andrea+shinji.it, 0.00684,
Received*borg.asidev.net+#+#+#+id, 0.00684,
Received*borg.asidev.net+Postfix, 0.00684,
Received*127.0.0.1+amavisd-new, 0.00827,
Received*borg.asidev.net+#+#+ESMTP, 0.00827,
Received*port+10024, 0.00833,
Received*amavisd-new+port, 0.00833,
Received*by+#+#+#+amavisd-new, 0.00833,
Received*by+#+#+127.0.0.1, 0.00833,
Received*bishop.asidev.net+#+#+port, 0.00833,
Received*bishop.asidev.net+bishop.asidev.net, 0.00833,
Received*bishop.asidev.net+#+#+#+id, 0.00833,
Received*bishop.asidev.net+#+#+#+id, 0.00833,
Received*localhost+bishop.asidev.net, 0.00833,
Received*bishop.asidev.net+#+amavisd-new, 0.00833,
Received*bishop.asidev.net+#+#+ESMTP, 0.00833,
Received*bishop.asidev.net+#+#+ESMTP, 0.00833
for all mail
2) Seems that clamav doesn't scan mails, altough i think i have
configured it. If I try a clamscan from shell clamav identifies a test
mail with virus correctly
3) I activate debug, but the file /var/log/dspam/dspam.log is not present
Please find my configuration file
/etc/dspam/dspam.conf:
http://pastebin.com/dd1dqVZ2
/etc/dspam/groups:
global:shared:*
/etc/dspam/dspam.d/mysql.conf:
http://pastebin.com/uKwrZWNn
Server is configured as follows:
Postfix communicates through DSPAM via unix socket, after DSPAM reiject
mail via lmtp to postfix, delivery is done through dovecot LDA
I trained DSPAM with spam and ham mail from spamassasin project, here
the output of dspam_stats:
global:
TP True Positives: 2031
TN True Negatives: 4197
FP False Positives: 5
FN False Negatives: 175
SC Spam Corpusfed: 0
NC Nonspam Corpusfed: 0
TL Training Left: 0
SHR Spam Hit Rate 92.07%
HSR Ham Strike Rate: 0.12%
PPV Positive predictive value: 99.75%
OCA Overall Accuracy: 97.19%
My idea was to start with the global group for every mailbox and then
have each user train his own mailbox, it's that wrong? Can someone point
me to teh right direction (for example how to debug each scan to
understand why clamav seems no to be used ora mail are marker Innocent)
Thank you very much
--
Andrea Cappelli
Asidev s.r.l.
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
