Hi, >select * from dspam_stats where uid=(select uid from dspam_virtual_uids where >username='[EMAIL PROTECTED]' limit 1);
mysql> select * from dspam_stats where uid=(select uid from dspam_virtual_uids where username='[EMAIL PROTECTED]' limit 1); +-----+--------------+------------------+--------------------+------------------------+----------------+--------------------+-----------------+---------------------+ | uid | spam_learned | innocent_learned | spam_misclassified | innocent_misclassified | spam_corpusfed | innocent_corpusfed | spam_classified | innocent_classified | +-----+--------------+------------------+--------------------+------------------------+----------------+--------------------+-----------------+---------------------+ | 2 | 14 | 83 | 14 | 2 | 0 | 0 | 0 | 0 | +-----+--------------+------------------+--------------------+------------------------+----------------+--------------------+-----------------+---------------------+ 1 row in set (0.02 sec) >Could you run and post the output of (execute one command at time): >describe dspam_preferences; mysql> describe dspam_preferences; +------------+----------------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +------------+----------------------+------+-----+---------+-------+ | uid | smallint(5) unsigned | NO | PRI | | | | preference | varchar(32) | NO | PRI | | | | value | varchar(64) | NO | | | | +------------+----------------------+------+-----+---------+-------+ 3 rows in set (0.02 sec) >describe dspam_signature_data; mysql> describe dspam_signature_data; +------------+----------------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +------------+----------------------+------+-----+---------+-------+ | uid | smallint(5) unsigned | NO | PRI | | | | signature | char(32) | NO | PRI | | | | data | blob | NO | | | | | length | smallint(6) | NO | | | | | created_on | date | NO | MUL | | | +------------+----------------------+------+-----+---------+-------+ 5 rows in set (0.00 sec) >describe dspam_stats; mysql> describe dspam_stats; +------------------------+----------------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +------------------------+----------------------+------+-----+---------+-------+ | uid | smallint(5) unsigned | NO | PRI | | | | spam_learned | int(11) | NO | | | | | innocent_learned | int(11) | NO | | | | | spam_misclassified | int(11) | NO | | | | | innocent_misclassified | int(11) | NO | | | | | spam_corpusfed | int(11) | NO | | | | | innocent_corpusfed | int(11) | NO | | | | | spam_classified | int(11) | NO | | | | | innocent_classified | int(11) | NO | | | | +------------------------+----------------------+------+-----+---------+-------+ 9 rows in set (0.00 sec) >describe dspam_token_data; mysql> describe dspam_token_data; +---------------+----------------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +---------------+----------------------+------+-----+---------+-------+ | uid | smallint(5) unsigned | NO | PRI | | | | token | bigint(20) unsigned | NO | PRI | | | | spam_hits | int(11) | NO | | | | | innocent_hits | int(11) | NO | | | | | last_hit | date | NO | | | | +---------------+----------------------+------+-----+---------+-------+ 5 rows in set (0.00 sec) >describe dspam_virtual_uids; mysql> describe dspam_virtual_uids; +----------+----------------------+------+-----+---------+----------------+ | Field | Type | Null | Key | Default | Extra | +----------+----------------------+------+-----+---------+----------------+ | uid | smallint(5) unsigned | NO | PRI | NULL | auto_increment | | username | varchar(128) | YES | UNI | NULL | | +----------+----------------------+------+-----+---------+----------------+ 2 rows in set (0.00 sec) >What about groups? Do you have groups active in DSPAM? What are they? No groups here yet. >Would it be possible to post the DSPAM headers of such a mail which is not >counted by dspam_stats? Headers below, I included some before and after DSPAM headers from a quarantined msg: Content-Transfer-Encoding: quoted-printable X-Junkmail-Status: score=10/55, host=legolas.inter.net.il X-Junkmail-SD-Raw: score=unknown, refid=str=0001.0A0B0201.475E61FA.0034:SCGSTAT390690,ss=1,fgs=0, ip=194.90.201.11, so=2007-10-30 19:00:17, dmn=5.4.3/2007-11-16 X-Junkmail-IWF: false X-DSPAM-Result: Spam X-DSPAM-Processed: Tue Dec 11 12:10:37 2007 X-DSPAM-Confidence: 0.7613 X-DSPAM-Improbability: 1 in 320 chance of being ham X-DSPAM-Probability: 1.0000 X-DSPAM-Signature: 2,475e621d57281615963980 Status: RO Content-Length: 10256 I have other servers running a similar setup with no issues, a config comparison did not yield anything I would suspect to cause this... Regards, Dudi No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.17.0/1180 - Release Date: 12/10/2007 14:51