Hello Steve this is the "full" Header of a spam mail where the training
also fails.
withe the mysql fetch error.............
marko
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost [127.0.0.1])
by salonwebserver.de (Postfix) with ESMTP id 02C8613BC09B
for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:38:09 +0100 (CET)
X-DSPAM-Result: =?iso-8859-1?Q?Spam=0D?=
X-DSPAM-Confidence: =?iso-8859-1?Q?0.7177=0D?=
X-DSPAM-Probability: =?iso-8859-1?Q?1.0000=0D?=
?iso-8859-1?Q?491de1b0254959695846858=0D?=
X-DSPAM-Factors: 15,
X-Virus-Scanned: amavisd-new at salonwebserver.de
X-Spam-Flag: NO
X-Spam-Score: 2.415
X-Spam-Level: **
X-Spam-Status: No, score=2.415 tagged_above=-1000 required=2.5
tests=[DNS_FROM_SECURITYSAGE=0.127, RCVD_IN_BL_SPAMCOP_NET=2.188,
RDNS_DYNAMIC=0.1]
Received: from salonwebserver.de ([127.0.0.1])
by localhost (kraftwerk1.salonwebserver.de [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id nOQQilMNvp-o for <[EMAIL PROTECTED]>;
Fri, 14 Nov 2008 21:38:07 +0100 (CET)
Received: from zackbummfertig.de
(static.243.42.46.78.clients.your-server.de [78.46.42.243])
(using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
(No client certificate requested)
by salonwebserver.de (Postfix) with ESMTPS id E86BD13BC078
for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:38:06 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by zackbummfertig.de (Postfix) with ESMTP id BC4BDECC067
for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:37:46 +0100 (CET)
X-Virus-Scanned: amavisd-new at zackbummfertig.de
Received: from zackbummfertig.de ([127.0.0.1])
by localhost (weberweb.zackbummfertig.de [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id xr6ayW0lyDGC for <[EMAIL PROTECTED]>;
Fri, 14 Nov 2008 21:37:43 +0100 (CET)
Received: from rachel22b12579 (unknown [78.146.113.186])
by zackbummfertig.de (Postfix) with SMTP id 3E83CECC040
for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:37:43 +0100 (CET)
Date: Fri, 14 Nov 2008 20:38:01 +0000
From: Chrystal Huddleston <[EMAIL PROTECTED]>
Subject: gambling slot machines
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
Organization: fightingbobfest.org
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
X-Priority: 3 (Normal)
Steve schrieb:
Can you post the full header of the message in question?
-------- Original-Nachricht --------
Datum: Fri, 14 Nov 2008 23:18:39 +0100
Von: Marko Weber <[EMAIL PROTECTED]>
An: "dspam-users@lists.nuclearelephant.com"
<dspam-users@lists.nuclearelephant.com>
Betreff: Re: [dspam-users] mysql fetch row error
Hi Steve,
this sed thing dont worked for me...... sorry
how i can get dspam working without this mysql fetch error ?
u have any hints ?
marko
Steve schrieb:
-------- Original-Nachricht --------
Datum: Fri, 14 Nov 2008 18:11:55 +0100
Von: Marko Weber <[EMAIL PROTECTED]>
An: "dspam-users@lists.nuclearelephant.com"
<dspam-users@lists.nuclearelephant.com>
Betreff: [dspam-users] mysql fetch row error
Hello to all in the Mailinglist,
i installed dspam on our server and it works so far that incoming mails
are tagged by dspam.
i installed "dovecot-antispam" for retraining.
when in try to retrain a mail i get this in the dspam.debug log =
9056: [11/14/2008 15:23:01] mysql_fetch_row() failed in
_ds_get_signature
in the /var/log/messages log i get this =
Nov 14 15:29:25 kraftwerk1 imap: antispam: /usr/bin/dspam
--source=error
--class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?= ...
Nov 14 15:29:25 kraftwerk1 dspam[9189]: Signature retrieval for
'=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed
Nov 14 15:29:25 kraftwerk1 dspam[9189]: Unable to find a valid
signature. Aborting.
Nov 14 15:29:25 kraftwerk1 dspam[9189]: process_message returned error
-5. dropping message.
but when i search for the signatur 491d76cb23581804284693 in the mysql
database i can find it there.
what is this ?iso-8859-1?Q? , is this causing the error ?
This means, that the plugin developer used the signature from the body
instead of the one found in the header. You can verify yourself what the
proper signature would be. Just issue this small one liner in sed:
sed -e '/^$/q' -ne 's/^X\-DSPAM\-Signature:
\(\([1-9][0-9]*,\)\{0,1\}\([a-f0-9]\{20,32\}\)\)$/\1/p' /path/to/your/message
This should print out the proper signature DSPAM should receive from the
plugin. The iso-8859-1 part indicates to me that the message is taken from
a iso8859-1 encoded message body.
do any1 need my dspam.conf , then i can paste it on web.
thank for helping.
marko
Steve
!DSPAM:1011,491e9824150929528910106!
