Hallo Marko

This is not normal. DSPAM does not add the encoding. It must be something else 
you are using/doing to get that tagged with the encoding in front of every 
DSPAM tag. And I don't see the DSPAM signature in your header. This is not 
normal. If you have the other DSPAM header lines, then you should have the 
result as well.

What MTA are you using?
How is the integration between MTA and DSPAM?
Do you have other filters running before and after DSPAM?
What IMAP server are you using?
What OS are you using?
Could you post your DSPAM config?


(Grüsse aus Zürich)

// Steve

-------- Original-Nachricht --------
> Datum: Sat, 15 Nov 2008 10:37:38 +0100
> Von: Marko Weber <[EMAIL PROTECTED]>
> An: "dspam-users@lists.nuclearelephant.com" 
> <dspam-users@lists.nuclearelephant.com>
> Betreff: Re: [dspam-users] mysql fetch row error

> Hello Steve this is the "full" Header of  a spam mail where the training 
> also fails.
> withe the mysql fetch error.............
> 
> marko
> 
> 
> Return-Path: <[EMAIL PROTECTED]>
> X-Original-To: [EMAIL PROTECTED]
> Delivered-To: [EMAIL PROTECTED]
> Received: from localhost (localhost [127.0.0.1])
>         by salonwebserver.de (Postfix) with ESMTP id 02C8613BC09B
>         for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:38:09 +0100
> (CET)
> X-DSPAM-Result: =?iso-8859-1?Q?Spam=0D?=
> X-DSPAM-Confidence: =?iso-8859-1?Q?0.7177=0D?=
> X-DSPAM-Probability: =?iso-8859-1?Q?1.0000=0D?=
> ?iso-8859-1?Q?491de1b0254959695846858=0D?=
> X-DSPAM-Factors: 15,
> X-Virus-Scanned: amavisd-new at salonwebserver.de
> X-Spam-Flag: NO
> X-Spam-Score: 2.415
> X-Spam-Level: **
> X-Spam-Status: No, score=2.415 tagged_above=-1000 required=2.5
>         tests=[DNS_FROM_SECURITYSAGE=0.127, RCVD_IN_BL_SPAMCOP_NET=2.188,
>         RDNS_DYNAMIC=0.1]
> Received: from salonwebserver.de ([127.0.0.1])
>         by localhost (kraftwerk1.salonwebserver.de [127.0.0.1]) 
> (amavisd-new, port 10024)
>         with ESMTP id nOQQilMNvp-o for <[EMAIL PROTECTED]>;
>         Fri, 14 Nov 2008 21:38:07 +0100 (CET)
> Received: from zackbummfertig.de 
> (static.243.42.46.78.clients.your-server.de [78.46.42.243])
>         (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
>         (No client certificate requested)
>         by salonwebserver.de (Postfix) with ESMTPS id E86BD13BC078
>         for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:38:06 +0100
> (CET)
> Received: from localhost (localhost [127.0.0.1])
>         by zackbummfertig.de (Postfix) with ESMTP id BC4BDECC067
>         for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:37:46 +0100
> (CET)
> X-Virus-Scanned: amavisd-new at zackbummfertig.de
> Received: from zackbummfertig.de ([127.0.0.1])
>         by localhost (weberweb.zackbummfertig.de [127.0.0.1]) 
> (amavisd-new, port 10024)
>         with ESMTP id xr6ayW0lyDGC for <[EMAIL PROTECTED]>;
>         Fri, 14 Nov 2008 21:37:43 +0100 (CET)
> Received: from rachel22b12579 (unknown [78.146.113.186])
>         by zackbummfertig.de (Postfix) with SMTP id 3E83CECC040
>         for <[EMAIL PROTECTED]>; Fri, 14 Nov 2008 21:37:43 +0100
> (CET)
> Date: Fri, 14 Nov 2008 20:38:01 +0000
> From: Chrystal Huddleston <[EMAIL PROTECTED]>
> Subject: gambling slot machines
> To: [EMAIL PROTECTED]
> Message-id: <[EMAIL PROTECTED]>
> Organization: fightingbobfest.org
> MIME-version: 1.0
> Content-type: text/plain; charset=us-ascii
> Content-transfer-encoding: 7bit
> X-Priority: 3 (Normal)
> 
> Steve schrieb:
> > Can you post the full header of the message in question?
> >
> >
> > -------- Original-Nachricht --------
> >   
> >> Datum: Fri, 14 Nov 2008 23:18:39 +0100
> >> Von: Marko Weber <[EMAIL PROTECTED]>
> >> An: "dspam-users@lists.nuclearelephant.com"
> <dspam-users@lists.nuclearelephant.com>
> >> Betreff: Re: [dspam-users] mysql fetch row error
> >>     
> >
> >   
> >> Hi Steve,
> >> this sed thing dont worked for me...... sorry
> >> how i can get dspam working without this mysql fetch error ?
> >> u have any hints ?
> >>
> >> marko
> >>
> >>
> >> Steve schrieb:
> >>     
> >>> -------- Original-Nachricht --------
> >>>   
> >>>       
> >>>> Datum: Fri, 14 Nov 2008 18:11:55 +0100
> >>>> Von: Marko Weber <[EMAIL PROTECTED]>
> >>>> An: "dspam-users@lists.nuclearelephant.com"
> >>>>         
> >> <dspam-users@lists.nuclearelephant.com>
> >>     
> >>>> Betreff: [dspam-users] mysql fetch row error
> >>>>     
> >>>>         
> >>>   
> >>>       
> >>>> Hello to all in the Mailinglist,
> >>>>
> >>>> i installed dspam on our server and it works so far that incoming
> mails
> >>>> are tagged by dspam.
> >>>> i installed "dovecot-antispam" for retraining.
> >>>> when in try to retrain a mail  i get this in the dspam.debug log =
> >>>>
> >>>> 9056: [11/14/2008 15:23:01] mysql_fetch_row() failed in
> >>>>         
> >> _ds_get_signature
> >>     
> >>>> in the /var/log/messages log i get this =
> >>>>
> >>>> Nov 14 15:29:25 kraftwerk1 imap: antispam: /usr/bin/dspam
> >>>>         
> >> --source=error 
> >>     
> >>>> --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?=
> ...
> >>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Signature retrieval for 
> >>>> '=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed
> >>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Unable to find a valid 
> >>>> signature. Aborting.
> >>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: process_message returned
> error 
> >>>> -5.  dropping message.
> >>>>
> >>>>
> >>>> but when i search for the signatur 491d76cb23581804284693 in the
> mysql 
> >>>> database i can find it there.
> >>>>
> >>>> what is this  ?iso-8859-1?Q? , is this causing the error ?
> >>>>
> >>>>     
> >>>>         
> >>> This means, that the plugin developer used the signature from the body
> >>>       
> >> instead of the one found in the header. You can verify yourself what
> the
> >> proper signature would be. Just issue this small one liner in sed:
> >>     
> >>> sed -e '/^$/q' -ne 's/^X\-DSPAM\-Signature:
> >>>       
> >> \(\([1-9][0-9]*,\)\{0,1\}\([a-f0-9]\{20,32\}\)\)$/\1/p'
> /path/to/your/message
> >>     
> >>> This should print out the proper signature DSPAM should receive from
> the
> >>>       
> >> plugin. The iso-8859-1 part indicates to me that the message is taken
> from
> >> a iso8859-1 encoded message body.
> >>     
> >>>
> >>>   
> >>>       
> >>>> do any1 need my dspam.conf , then i can paste it on web.
> >>>>
> >>>> thank for helping.
> >>>>
> >>>> marko
> >>>>
> >>>>     
> >>>>         
> >>> Steve
> >>>
> >>>
> >>>   
> >>>       
> >>>>     
> >>>>         
> >>>   
> >>>       
> >>
> >>     
> >
> >   
> 
> 
> 

-- 
Sensationsangebot nur bis 30.11: GMX FreeDSL - Telefonanschluss + DSL 
für nur 16,37 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a

!DSPAM:1011,491e9b65150926051614915!


Reply via email to