Hi all! I have searched the complete internet (well...kind of...) and I'm still very much lost...
I'm trying to setup postfix/dspam/dovecot and I don't think it's working as it should, even though I'm rather close, i think... What I have now: - mails for my (6, and all local, real users with Maildir mailboxes) users are fetched from various remote pop3 boxes using fetchmail, and then 'injected' in my local server, via port 25. (where postfix is listening) This works. - postfix is configured with "mailbox_command = /usr/sbin/dspam –deliver=innocent –user $USER", so mail is 'handed over' to dspam. This also seems to work. - dspam classifies each email into spam or ham. This is where things seem to go wrong, because I'm basically only seeing "X-DSPAM-Result: Innocent". I'll paste a full example below. - I have trained dspam according to the instructions here: http://www.directadmin.com/forum/showthread.php?t=16015 - I have composed a message with only capitals, lot's a exclamation marks, $3.000.000, www.viagra.com, etc, etc, and it classifies as innocent. Even when I re-train dspam, it STILL sees a new message with the same content, sent from the same machine/account as innocent. This can never be right... My system is OpenSUSE 10.3 x64. In /var/lib/dspam/system.log I see all messages being logged, like this: http://pastebin.com/m6a765191 (so no errors, just information) I would like to have one global anti-spam database, shared with all users. Nothing fancy. I'm using mysql backend. (suse10.3 comes with mysql5) Could the problem be related to the fact that all mails seem to come from localhost, as this is where fetchmail 'injects' them? I have the feeling I'm soo close, but missing some vital steps. If anyone could help me I'd be really grateful! Kind regards, mj from here: a sample 'innocent' message: Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from ml310.hidden.com (localhost [127.0.0.1]) by ml310.hidden.com (Postfix) with ESMTP id 572C81801A36 for <[EMAIL PROTECTED]>; Fri, 8 Aug 2008 17:46:01 +0200 (CEST) X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from mail.narfum.org [62.133.194.66] by ml310.hidden.com with POP3 (fetchmail-6.3.8) for <[EMAIL PROTECTED]> (single-drop); Fri, 08 Aug 2008 17:46:01 +0200 (CEST) Received: from localhost (server02 [127.0.0.1]) by mx1.narfum.net (Narfum Inc. Mail Service) with ESMTP id 97DB927ECFF for <[EMAIL PROTECTED]>; Fri, 8 Aug 2008 17:44:45 +0200 (CEST) X-Virus-Scanned: by Narfum Inc. Received: from mx1.narfum.net ([62.133.194.66]) by localhost (server02.bw110.nl.narfum.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5uOyJkpsGyTU for <[EMAIL PROTECTED]>; Fri, 8 Aug 2008 17:44:39 +0200 (CEST) Received: from rv-out-0708.google.com (rv-out-0708.google.com [ 209.85.198.246]) by mx1.narfum.net (Narfum Inc. Mail Service) with ESMTP id C9C3927ECFA for <[EMAIL PROTECTED]>; Fri, 8 Aug 2008 17:44:38 +0200 (CEST) Received: by rv-out-0708.google.com with SMTP id b17so1437668rvf.44 for <[EMAIL PROTECTED]>; Fri, 08 Aug 2008 08:44:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type:references; bh=ZOXek0FdWfQahTgeCSjqzkUtgP79I0WJVMGrc5Q8DzM=; b=hwgSFDeQpaiRT19SmfvhS7LR9X7bviWqSN3QOZZBIFtLWysScyr1EX11nXudvRoUEW jgHqtEEEPr9asMLVO4k8+r3SY08wdm3A9nTMjueB6FJv2TnXCg1OEFJfb6cb66jOmJzc paDTipGEQ/1m0IivmJzVtS4XlJyO3XNJ7SeE8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:references; b=WzHAZdjU0bVNViw/+X1yOqbasS/f8IEjkiV5gWC9yuvA/ha3U4gNVAwWIl7vzgAkFD yRdQZJB3JFhQ++LuVtu0Z1v/fm5bK8tGU1kEHvZw8WjcKDRWTO/vS2lB+NaqrmDvZdqg UBNuabAR9GxzWf1n7T2C1vzdG6AYa6xawDicA= Received: by 10.114.124.1 with SMTP id w1mr2113078wac.73.1218210276334; Fri, 08 Aug 2008 08:44:36 -0700 (PDT) Received: by 10.114.194.10 with HTTP; Fri, 8 Aug 2008 08:44:36 -0700 (PDT) Message-ID: <[EMAIL PROTECTED]> Date: Fri, 8 Aug 2008 17:44:36 +0200 From: "mj" <[EMAIL PROTECTED]> To: mailing <[EMAIL PROTECTED]> Subject: Fwd: EARN CASH In-Reply-To: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_18250_1706566.1218210276356" References: <[EMAIL PROTECTED]> X-DSPAM-Result: Innocent X-DSPAM-Processed: Fri Aug 8 17:46:01 2008 X-DSPAM-Confidence: 0.5672 X-DSPAM-Improbability: 1 in 132 chance of being spam X-DSPAM-Probability: 0.0473 X-DSPAM-Factors: 27, From*"mj" <[EMAIL PROTECTED]>, 0.25926, From*gmail.com>, 0.25926, From*mj"+<mj, 0.25926, Url*http, 0.25926, Url*href=", 0.25926, From*jan+mj", 0.25926, From*<mj+gmail.com>, 0.25926, Date*2008+17, 0.73684, *17, 0.73684, Received*17, 0.73684, Received*17, 0.73684, Date*17, 0.73684, *8+17, 0.73684, Received*2008+17, 0.73684, Received*2008+17, 0.73684, Received*with+HTTP, 0.28571, Received*10.114.194.10+with, 0.28571, DKIM-Signature*h=domainkey+signature, 0.28571, DomainKey-Signature*h=message+id, 0.28571, Content-Disposition*inline, 0.28571, Content-Disposition*inline, 0.28571, DKIM-Signature*s=gamma, 0.28571, DKIM-Signature*a=rsa+sha256, 0.28571, Content-Type*text/plain+charset=UTF, 0.28571, Return-Path*gmail.com>, 0.28571, DKIM-Signature*c=relaxed/relaxed, 0.28571, DKIM-Signature*d=gmail.com, 0.28571 ------=_Part_18250_1706566.1218210276356 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline ---------- Forwarded message ---------- From: mj <[EMAIL PROTECTED]> Date: 2008/8/8 Subject: EARN CASH To: mailing <[EMAIL PROTECTED]> HI! WAIT NO LONGER!!!! $1.000.000 WWW.VIAGRA.COM ------=_Part_18250_1706566.1218210276356 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline <div dir="ltr"><br><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">mj</b> <span dir="ltr"><<a href="mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</a>></span><br> Date: 2008/8/8<br>Subject: EARN CASH<br>To: mailing <<a href="mailto: [EMAIL PROTECTED]">[EMAIL PROTECTED]</a>><br><br><br><div dir="ltr">HI!<br><br>WAIT NO LONGER!!!!<br><br>$1.000.000<br><br><a href=" http://WWW.VIAGRA.COM"; target="_blank">WWW.VIAGRA.COM</a><br> </div> </div><br></div> ------=_Part_18250_1706566.1218210276356-- !DSPAM:1011,489c9083150925134319821!
