[dspam-users] dspam stats
Hello list, I'm testing a new installation of dspam 3.6.8 on Debian lenny (testing). Everything seems to work fine, dspam is at the early stages of learning... One thing I noticed, and could not find the cause for. When I look at the System Status page, it shows is has 1 spam message today. I have tracked the message and found it in a user quarantine. The weird thing is that the user stats shows TP: 0 while there are 3 messages in his quarantine, other counters looks valid: mr:~# dspam_stats [EMAIL PROTECTED] [EMAIL PROTECTED] TP: 0 TN:81 FP: 2 FN:14 SC: 0 NC: 0 mr:~# I have checked dspam_stats again - it shows TP: 0 for all users while at least some of them do have some spam detected and quarantined. dspam_stats table in mysql agrees with what dspam_stats shows so I don't think the problem is within mysql. dspam.conf follows: mr:~# cat /etc/dspam/dspam.conf| grep '^[^#]' Home /var/spool/dspam StorageDriver /usr/lib/dspam/libmysql_drv.so DeliveryHost127.0.0.1 DeliveryPort10029 DeliveryIdent localhost DeliveryProto SMTP OnFail error Trust root Trust dspam Trust mail Trust mailnull Trust smmsp Trust daemon Trust nobody Trust postfix Trust www-data Trust cyrus TrainingMode teft TestConditionalTraining on Feature noise Feature chained Feature whitelist Algorithm graham burton PValue graham SupressWebStats off ImprobabilityDrive on Preference "spamAction=quarantine" Preference "signatureLocation=headers" # 'message' or 'headers' Preference "showFactors=off" Preference "spamSubject=*SPAM*" AllowOverride trainingMode AllowOverride spamAction spamSubject AllowOverride statisticalSedation AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride signatureLocation AllowOverride showFactors AllowOverride optIn optOut AllowOverride whitelistThreshold AllowOverride localStore HashRecMax 98317 HashAutoExtend on HashMaxExtents 0 HashExtentSize 49157 HashMaxSeek 100 HashConnectionCache 10 Notifications off PurgeSignatures 14 # Stale signatures PurgeNeutral90 # Tokens with neutralish probabilities PurgeUnused 120 # Unused tokens PurgeHapaxes30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hit LocalMX 127.0.0.1 LocalMX 192.117.168.211 LocalMX 192.117.168.210 SystemLog on UserLog on Opt out ParseToHeaders on ChangeModeOnParse on ChangeUserOnParse full Broken case Broken lineStripping ClamAVPort 3310 ClamAVHost 127.0.0.1 ClamAVResponse spam ServerMode auto ServerPass.Relay1 "dspam" ServerParameters"--deliver=innocent -d %u" ServerIdent "dspam.relay" ServerDomainSocketPath "/tmp/dspam.sock" ClientHost /tmp/dspam.sock ClientIdent "[EMAIL PROTECTED]" ProcessorBias on Include /etc/dspam/dspam.d/ mr:~# Pointers appreciated... Dudi Goldenberg CTO Kolcore Ltd. Registered Linux user #79506 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.17.0/1180 - Release Date: 12/10/2007 14:51
Re: [dspam-users] dspam stats
Hi Dudi, Can't help you with the specific problem, but... If you (or anyone else) are interested in a Hebrew version of dspam (V3.8.0) please contact me offlist. > Hello list, > > I'm testing a new installation of dspam 3.6.8 on Debian lenny (testing). > > Everything seems to work fine, dspam is at the early stages of learning... > > One thing I noticed, and could not find the cause for. > > When I look at the System Status page, it shows is has 1 spam message > today. > > I have tracked the message and found it in a user quarantine. > > The weird thing is that the user stats shows TP: 0 while there are 3 > messages in his quarantine, other counters looks valid: > > mr:~# dspam_stats [EMAIL PROTECTED] > [EMAIL PROTECTED] TP: 0 TN:81 FP: 2 FN:14 SC: 0 > NC: 0 > mr:~# > > I have checked dspam_stats again - it shows TP: 0 for all users while at > least some of them do have some spam detected and quarantined. > > dspam_stats table in mysql agrees with what dspam_stats shows so I don't > think the problem is within mysql. > > dspam.conf follows: > > mr:~# cat /etc/dspam/dspam.conf| grep '^[^#]' > Home /var/spool/dspam > StorageDriver /usr/lib/dspam/libmysql_drv.so > DeliveryHost127.0.0.1 > DeliveryPort10029 > DeliveryIdent localhost > DeliveryProto SMTP > OnFail error > Trust root > Trust dspam > Trust mail > Trust mailnull > Trust smmsp > Trust daemon > Trust nobody > Trust postfix > Trust www-data > Trust cyrus > TrainingMode teft > TestConditionalTraining on > Feature noise > Feature chained > Feature whitelist > Algorithm graham burton > PValue graham > SupressWebStats off > ImprobabilityDrive on > Preference "spamAction=quarantine" > Preference "signatureLocation=headers" # 'message' or 'headers' > Preference "showFactors=off" > Preference "spamSubject=*SPAM*" > AllowOverride trainingMode > AllowOverride spamAction spamSubject > AllowOverride statisticalSedation > AllowOverride enableBNR > AllowOverride enableWhitelist > AllowOverride signatureLocation > AllowOverride showFactors > AllowOverride optIn optOut > AllowOverride whitelistThreshold > AllowOverride localStore > HashRecMax 98317 > HashAutoExtend on > HashMaxExtents 0 > HashExtentSize 49157 > HashMaxSeek 100 > HashConnectionCache 10 > Notifications off > PurgeSignatures 14 # Stale signatures > PurgeNeutral90 # Tokens with neutralish probabilities > PurgeUnused 120 # Unused tokens > PurgeHapaxes30 # Tokens with less than 5 hits (hapaxes) > PurgeHits1S 15 # Tokens with only 1 spam hit > PurgeHits1I 15 # Tokens with only 1 innocent hit > LocalMX 127.0.0.1 > LocalMX 192.117.168.211 > LocalMX 192.117.168.210 > SystemLog on > UserLog on > Opt out > ParseToHeaders on > ChangeModeOnParse on > ChangeUserOnParse full > Broken case > Broken lineStripping > ClamAVPort 3310 > ClamAVHost 127.0.0.1 > ClamAVResponse spam > ServerMode auto > ServerPass.Relay1 "dspam" > ServerParameters"--deliver=innocent -d %u" > ServerIdent "dspam.relay" > ServerDomainSocketPath "/tmp/dspam.sock" > ClientHost /tmp/dspam.sock > ClientIdent "[EMAIL PROTECTED]" > ProcessorBias on > Include /etc/dspam/dspam.d/ > mr:~# > > Pointers appreciated... > > Dudi Goldenberg > CTO > Kolcore Ltd. > Registered Linux user #79506 > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.17.0/1180 - Release Date: > 12/10/:51 > > > !DSPAM:500,475e7be! >
Re: [dspam-users] dspam stats
Original-Nachricht > Datum: Tue, 11 Dec 2007 14:01:23 +0200 > Von: "Dudi Goldenberg" <[EMAIL PROTECTED]> > An: dspam-users@lists.nuclearelephant.com > Betreff: [dspam-users] dspam stats > Hello list, > > I'm testing a new installation of dspam 3.6.8 on Debian lenny (testing). > > Everything seems to work fine, dspam is at the early stages of learning... > > One thing I noticed, and could not find the cause for. > > When I look at the System Status page, it shows is has 1 spam message > today. > > I have tracked the message and found it in a user quarantine. > > The weird thing is that the user stats shows TP: 0 while there are 3 > messages in his quarantine, other counters looks valid: > > mr:~# dspam_stats [EMAIL PROTECTED] > [EMAIL PROTECTED] TP: 0 TN:81 FP: 2 FN:14 SC: 0 > NC: 0 > mr:~# > > I have checked dspam_stats again - it shows TP: 0 for all users while at > least some of them do have some spam detected and quarantined. > > dspam_stats table in mysql agrees with what dspam_stats shows so I don't > think the problem is within mysql. > I don't understand that. Who agrees with what? If you look in MySQL do you see different output then with dspam_stats? Could you run and post the output: select * from dspam_stats where uid=(select uid from dspam_virtual_uids where username='[EMAIL PROTECTED]' limit 1); Could you run and post the output of (execute one command at time): describe dspam_preferences; describe dspam_signature_data; describe dspam_stats; describe dspam_token_data; describe dspam_virtual_uids; What about groups? Do you have groups active in DSPAM? What are they? Would it be possible to post the DSPAM headers of such a mail which is not counted by dspam_stats? > dspam.conf follows: > > mr:~# cat /etc/dspam/dspam.conf| grep '^[^#]' > Home /var/spool/dspam > StorageDriver /usr/lib/dspam/libmysql_drv.so > DeliveryHost127.0.0.1 > DeliveryPort10029 > DeliveryIdent localhost > DeliveryProto SMTP > OnFail error > Trust root > Trust dspam > Trust mail > Trust mailnull > Trust smmsp > Trust daemon > Trust nobody > Trust postfix > Trust www-data > Trust cyrus > TrainingMode teft > TestConditionalTraining on > Feature noise > Feature chained > Feature whitelist > Algorithm graham burton > PValue graham > SupressWebStats off > ImprobabilityDrive on > Preference "spamAction=quarantine" > Preference "signatureLocation=headers" # 'message' or 'headers' > Preference "showFactors=off" > Preference "spamSubject=*SPAM*" > AllowOverride trainingMode > AllowOverride spamAction spamSubject > AllowOverride statisticalSedation > AllowOverride enableBNR > AllowOverride enableWhitelist > AllowOverride signatureLocation > AllowOverride showFactors > AllowOverride optIn optOut > AllowOverride whitelistThreshold > AllowOverride localStore > HashRecMax 98317 > HashAutoExtend on > HashMaxExtents 0 > HashExtentSize 49157 > HashMaxSeek 100 > HashConnectionCache 10 > Notifications off > PurgeSignatures 14 # Stale signatures > PurgeNeutral90 # Tokens with neutralish probabilities > PurgeUnused 120 # Unused tokens > PurgeHapaxes30 # Tokens with less than 5 hits (hapaxes) > PurgeHits1S 15 # Tokens with only 1 spam hit > PurgeHits1I 15 # Tokens with only 1 innocent hit > LocalMX 127.0.0.1 > LocalMX 192.117.168.211 > LocalMX 192.117.168.210 > LocalMX with the above addresses is not needed. DSPAM does automatically use LocalMX on addresses starting with: 127. 10. 172.16. 192.168. 169.254. > SystemLog on > UserLog on > Opt out > ParseToHeaders on > ChangeModeOnParse on > ChangeUserOnParse full > Broken case > Broken lineStripping > ClamAVPort 3310 > ClamAVHost 127.0.0.1 > ClamAVResponse spam > Could you look in the log if the message was a virus message? Search your log for messages containing "A virus was detected in the message contents" and/or "virus warning: infected message from " > ServerMode auto > ServerPass.Relay1 "dspam" > ServerParameters"--deliver=innocent -d %u" > ServerIdent "dspam.relay" > ServerDomainSocketPath "/tmp/dspam.sock" > ClientHost /tmp/dspam.sock > ClientIdent "[EMAIL PROTECTED]" > ProcessorBias on > Include /etc/dspam/dspam.d/ > mr:~# > > Pointers appreciated... > > Dudi Goldenberg > CTO > Kolcore Ltd. > Registered Linux user #79506 > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.17.0/1180 - Release Date: > 12/10/2007 14:51 > -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail
RE: [dspam-users] dspam stats
Hi, >select * from dspam_stats where uid=(select uid from dspam_virtual_uids where >username='[EMAIL PROTECTED]' limit 1); mysql> select * from dspam_stats where uid=(select uid from dspam_virtual_uids where username='[EMAIL PROTECTED]' limit 1); +-+--+--+++++-+-+ | uid | spam_learned | innocent_learned | spam_misclassified | innocent_misclassified | spam_corpusfed | innocent_corpusfed | spam_classified | innocent_classified | +-+--+--+++++-+-+ | 2 | 14 | 83 | 14 | 2 | 0 | 0 | 0 | 0 | +-+--+--+++++-+-+ 1 row in set (0.02 sec) >Could you run and post the output of (execute one command at time): >describe dspam_preferences; mysql> describe dspam_preferences; ++--+--+-+-+---+ | Field | Type | Null | Key | Default | Extra | ++--+--+-+-+---+ | uid| smallint(5) unsigned | NO | PRI | | | | preference | varchar(32) | NO | PRI | | | | value | varchar(64) | NO | | | | ++--+--+-+-+---+ 3 rows in set (0.02 sec) >describe dspam_signature_data; mysql> describe dspam_signature_data; ++--+--+-+-+---+ | Field | Type | Null | Key | Default | Extra | ++--+--+-+-+---+ | uid| smallint(5) unsigned | NO | PRI | | | | signature | char(32) | NO | PRI | | | | data | blob | NO | | | | | length | smallint(6) | NO | | | | | created_on | date | NO | MUL | | | ++--+--+-+-+---+ 5 rows in set (0.00 sec) >describe dspam_stats; mysql> describe dspam_stats; ++--+--+-+-+---+ | Field | Type | Null | Key | Default | Extra | ++--+--+-+-+---+ | uid| smallint(5) unsigned | NO | PRI | | | | spam_learned | int(11) | NO | | | | | innocent_learned | int(11) | NO | | | | | spam_misclassified | int(11) | NO | | | | | innocent_misclassified | int(11) | NO | | | | | spam_corpusfed | int(11) | NO | | | | | innocent_corpusfed | int(11) | NO | | | | | spam_classified| int(11) | NO | | | | | innocent_classified| int(11) | NO | | | | ++--+--+-+-+---+ 9 rows in set (0.00 sec) >describe dspam_token_data; mysql> describe dspam_token_data; +---+--+--+-+-+---+ | Field | Type | Null | Key | Default | Extra | +---+--+--+-+-+---+ | uid | smallint(5) unsigned | NO | PRI | | | | token | bigint(20) unsigned | NO | PRI | | | | spam_hits | int(11) | NO | | | | | innocent_hits | int(11) | NO | | | | | last_hit | date | NO | | | | +---+--+--+-+-+---+ 5 rows in set (0.00 sec) >describe dspam_virtual_uids; mysql> describe dspam_virtual_uids; +--+--+--+-+-++ | Field| Type | Null | Key | Default | Extra | +--+--+--+-+-++ | uid | smallint(5) unsigned | NO | PRI | NULL| auto_increment | | username | varchar(128) | YES | UNI | NULL|| +--+--+--+-+-++ 2 rows in set (0.00 sec) >What about groups? Do you have groups active in DSPAM? What are they? N
Re: [dspam-users] Type Resend
Elias Oltmanns wrote: Juan Manuel <[EMAIL PROTECTED]> wrote: Elias Oltmanns wrote: Juan Manuel <[EMAIL PROTECTED]> wrote: [...] I want to achieve that, even if I retrain all the False Positive, the mail will only arrive once to each mailbox. Are you talking about retraining from within the webue? Since I don't use the webui, I have no idea how the mechanism works. How does it retrain messages? Does it call dspam directly or does it forward the message to the retrain-ham alias? And how are retrained false positives moved to the INBOX of the user? I suppose this latter task has to be done using some IMAP methods or some such. Just feeding the message back to exim without modifying the headers is most definitely not the right thing to do. Regards, Elias Yes, I'm using Web UI.. As far as I see, the UI calls directly dspam to retrain (I haven't seen forward when I do retrain). Is the message retrained successfully according to dspam_stats? As for the FPs, it mails (like mail() funcion in PHP) the user(s) address (as if the mail would've come again from the outside, only locally generated). Sorry, I still don't quite get it, I'm afraid. If there are multiple addresses in the To: header of a message to Bob, which has been wrongly classified as spam, and if Bob retrains that message afterwards, whom does the Web UI send this message to? Obviously, it should send it to a preconfigured address (i.e. Bob's) regardless what addresses are given in the To:, Cc: or any other header. And if so, you should configure exim to recognise messages sent by the Web UI in order to bypass the dspam routers. Regards, Elias Fixed. It was the order of routers in exim configuration. Now it scans the mail -before- it goes into aliases checkout. Regards Juan.
Re: [dspam-users] MySQLUIDInSignature
Richard Freeman <[EMAIL PROTECTED]> wrote on 12/10/2007 10:35:22 AM: > I'm using a postfix delivery agent to do it: > > dspam-add unix - n n - 10 pipe >flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=spam > --user root > Ok...I'm going to try this route. Looking through pipe(8) and master(5) it seems relatively straightforward what it is doing. I'm assuming I'll need something like the following in my transport map: [EMAIL PROTECTED]dspam-add: [EMAIL PROTECTED] dspam-del: With the appropriate master.cf entries: dspam-add unix - n n - 10 pipe flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=spam --user root dspam-del unix - n n - 10 pipe flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=ham --user root I'm going to give that a try and see what happens. Michael D. Lemon Director of Information Technology Americal Corporation Phone: 252-762-2000 x2142 Fax: 252-762-0176
Re: [dspam-users] MySQLUIDInSignature
Original-Nachricht
> Datum: Tue, 11 Dec 2007 12:18:07 -0500
> Von: [EMAIL PROTECTED]
> An: Richard Freeman <[EMAIL PROTECTED]>
> CC: dspam-users@lists.nuclearelephant.com
> Betreff: Re: [dspam-users] MySQLUIDInSignature
> Richard Freeman <[EMAIL PROTECTED]> wrote on 12/10/2007 10:35:22
> AM:
>
> > I'm using a postfix delivery agent to do it:
> >
> > dspam-add unix - n n - 10 pipe
> >flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=spam
> > --user root
> >
>
> Ok...I'm going to try this route. Looking through pipe(8) and master(5) it
> seems relatively straightforward what it is doing.
>
> I'm assuming I'll need something like the following in my transport map:
>
> [EMAIL PROTECTED]dspam-add:
> [EMAIL PROTECTED] dspam-del:
>
> With the appropriate master.cf entries:
>
> dspam-add unix - n n - 10 pipe
>flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=spam
> --user root
> dspam-del unix - n n - 10 pipe
>flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=ham
> --user root
>
Or with just one simple PCRE transport and one entry in master.cf:
dspam-train unix - n n - 10 pipe
flags=Rhq user=dspam:mail argv=/usr/bin/dspam
--user ${sender}
--class=${nexthop}
--source=error
--deliver=spam,innocent,summary
--stdout
/^train\-(spam|ham)[EMAIL PROTECTED]/ dspam-train:${1}
> I'm going to give that a try and see what happens.
>
> Michael D. Lemon
> Director of Information Technology
> Americal Corporation
> Phone: 252-762-2000 x2142
> Fax: 252-762-0176
--
Pt! Schon vom neuen GMX MultiMessenger gehört?
Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
Re: [dspam-users] MySQLUIDInSignature
Original-Nachricht
> Datum: Tue, 11 Dec 2007 18:59:01 +0100
> Von: "Steve" <[EMAIL PROTECTED]>
> An: dspam-users@lists.nuclearelephant.com
> Betreff: Re: [dspam-users] MySQLUIDInSignature
>
> Original-Nachricht
> > Datum: Tue, 11 Dec 2007 12:18:07 -0500
> > Von: [EMAIL PROTECTED]
> > An: Richard Freeman <[EMAIL PROTECTED]>
> > CC: dspam-users@lists.nuclearelephant.com
> > Betreff: Re: [dspam-users] MySQLUIDInSignature
>
> > Richard Freeman <[EMAIL PROTECTED]> wrote on 12/10/2007
> 10:35:22
> > AM:
> >
> > > I'm using a postfix delivery agent to do it:
> > >
> > > dspam-add unix - n n - 10 pipe
> > >flags=Rhu user=dspam argv=/usr/bin/dspam --source=error
> --class=spam
> > > --user root
> > >
> >
> > Ok...I'm going to try this route. Looking through pipe(8) and master(5)
> it
> > seems relatively straightforward what it is doing.
> >
> > I'm assuming I'll need something like the following in my transport map:
> >
> > [EMAIL PROTECTED]dspam-add:
> > [EMAIL PROTECTED] dspam-del:
> >
> > With the appropriate master.cf entries:
> >
> > dspam-add unix - n n - 10 pipe
> >flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=spam
> > --user root
> > dspam-del unix - n n - 10 pipe
> >flags=Rhu user=dspam argv=/usr/bin/dspam --source=error --class=ham
> > --user root
> >
> Or with just one simple PCRE transport and one entry in master.cf:
> dspam-train unix - n n - 10 pipe
>flags=Rhq user=dspam:mail argv=/usr/bin/dspam
>--user ${sender}
>--class=${nexthop}
>--source=error
>--deliver=spam,innocent,summary
>--stdout
>
> /^train\-(spam|ham)[EMAIL PROTECTED]/ dspam-train:${1}
>
Argh! Class can not be ham! Sorry! The proper setup would be:
dspam-train unix - n n - 10 pipe
flags=Rhq user=dspam:mail argv=/usr/bin/dspam
--user ${sender}
--class=${nexthop}
--source=error
--deliver=spam,innocent,summary
--stdout
/^train\-(spam|innocent)[EMAIL PROTECTED]/ dspam-train:${1}
If you need to have [EMAIL PROTECTED] then adding another transport will solve
the issue:
/[EMAIL PROTECTED]/ dspam-train:innocent
Or if you want to be fancy then and have more then one alias for a class do
this:
/^train\-(ham|nonspam|innocent|good)[EMAIL PROTECTED]/ dspam-train:innocent
/^train\-(spam|nonham|junk|uce|bad)[EMAIL PROTECTED]/ dspam-train:spam
>
>
> > I'm going to give that a try and see what happens.
> >
> > Michael D. Lemon
> > Director of Information Technology
> > Americal Corporation
> > Phone: 252-762-2000 x2142
> > Fax: 252-762-0176
>
> --
> Pt! Schon vom neuen GMX MultiMessenger gehört?
> Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
--
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail
Re: [dspam-users] MySQLUIDInSignature
[EMAIL PROTECTED] wrote on 12/11/2007 01:06:27
PM:
>
> dspam-train unix - n n - 10 pipe
>flags=Rhq user=dspam:mail argv=/usr/bin/dspam
>--user ${sender}
>--class=${nexthop}
>--source=error
>--deliver=spam,innocent,summary
>--stdout
>
> /^train\-(spam|innocent)[EMAIL PROTECTED]/ dspam-train:${1}
>
> If you need to have [EMAIL PROTECTED] then adding another
> transport will solve the issue:
> /[EMAIL PROTECTED]/ dspam-train:innocent
>
> Or if you want to be fancy then and have more then one alias for a
> class do this:
> /^train\-(ham|nonspam|innocent|good)[EMAIL PROTECTED]/ dspam-train:innocent
> /^train\-(spam|nonham|junk|uce|bad)[EMAIL PROTECTED]/ dspam-train:spam
>
AhhhI like this better. Didn't realize that you could put anything
you wanted in the nexthop field. The man page is not very clear about
that.
The --deliver=,summary option isn't in the man page. Is that a
feature from a later version?
Michael D. Lemon
Director of Information Technology
Americal Corporation
Phone: 252-762-2000 x2142
Fax: 252-762-0176
Re: [dspam-users] MySQLUIDInSignature
Original-Nachricht
> Datum: Tue, 11 Dec 2007 13:24:25 -0500
> Von: [EMAIL PROTECTED]
> An: dspam-users@lists.nuclearelephant.com
> Betreff: Re: [dspam-users] MySQLUIDInSignature
> [EMAIL PROTECTED] wrote on 12/11/2007 01:06:27
> PM:
>
> >
> > dspam-train unix - n n - 10 pipe
> >flags=Rhq user=dspam:mail argv=/usr/bin/dspam
> >--user ${sender}
> >--class=${nexthop}
> >--source=error
> >--deliver=spam,innocent,summary
> >--stdout
> >
> > /^train\-(spam|innocent)[EMAIL PROTECTED]/ dspam-train:${1}
> >
> > If you need to have [EMAIL PROTECTED] then adding another
> > transport will solve the issue:
> > /[EMAIL PROTECTED]/ dspam-train:innocent
> >
> > Or if you want to be fancy then and have more then one alias for a
> > class do this:
> > /^train\-(ham|nonspam|innocent|good)[EMAIL PROTECTED]/
> > dspam-train:innocent
> > /^train\-(spam|nonham|junk|uce|bad)[EMAIL PROTECTED]/ dspam-train:spam
> >
>
> AhhhI like this better. Didn't realize that you could put anything
> you wanted in the nexthop field. The man page is not very clear about
> that.
>
> The --deliver=,summary option isn't in the man page. Is that a
> feature from a later version?
>
Probably not. It is a switch used mostly while training and it just prints one
line with the status of the message. Since you anyway don't want DSPAM to
deliver that message you are better off to get DSPAM to output as less as
possible. Therefore --deliver=...,sumary looks to be the right switch for you.
btw: Didn't you contacted me some time ago because of the spam/ham alias in
DSPAM and a way to report from within the Lotus Notes client?
// Steve
> Michael D. Lemon
> Director of Information Technology
> Americal Corporation
> Phone: 252-762-2000 x2142
> Fax: 252-762-0176
--
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer
Re: [dspam-users] MySQLUIDInSignature
> > The --deliver=,summary option isn't in the man page. Is that a > > feature from a later version? > > > Probably not. It is a switch used mostly while training and it just > prints one line with the status of the message. Since you anyway > don't want DSPAM to deliver that message you are better off to get > DSPAM to output as less as possible. Therefore --deliver=...,sumary > looks to be the right switch for you. > > btw: Didn't you contacted me some time ago because of the spam/ham > alias in DSPAM and a way to report from within the Lotus Notes client? Yes, and thank you again for the code you sent. It worked fine. Now I'm trying to get Postfix/Dspam to process it correctly. MDL
Re: [dspam-users] MySQLUIDInSignature
Original-Nachricht > Datum: Tue, 11 Dec 2007 14:15:32 -0500 > Von: [EMAIL PROTECTED] > An: dspam-users@lists.nuclearelephant.com > Betreff: Re: [dspam-users] MySQLUIDInSignature > > > The --deliver=,summary option isn't in the man page. Is that a > > > feature from a later version? > > > > > Probably not. It is a switch used mostly while training and it just > > prints one line with the status of the message. Since you anyway > > don't want DSPAM to deliver that message you are better off to get > > DSPAM to output as less as possible. Therefore --deliver=...,sumary > > looks to be the right switch for you. > > > > btw: Didn't you contacted me some time ago because of the spam/ham > > alias in DSPAM and a way to report from within the Lotus Notes client? > > Yes, and thank you again for the code you sent. It worked fine. > Cool! Development on/for IBM Lotus Notes/Domino is one of my core competences :) > Now I'm > trying to get Postfix/Dspam to process it correctly. > Try the stuff mentioned in the other mail. If that does not work, then let me know. > MDL > Steve -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser
RE: [dspam-users] Agrrr! Debug!
Tonni I am trying to setup a configuration like yours, is there a way you can help me or post your configuration files for dspam and postfix. Thanks -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de Tony Earnshaw Enviado el: Lunes, 10 de Diciembre de 2007 12:40 a.m. CC: dspam-users@lists.nuclearelephant.com Asunto: Re: [dspam-users] Agrrr! Debug! Steve skrev, on 10-12-2007 02:35: [...] >> Hmmm ... my rpm has a %post section that stops and restarts dspam. When >> it had got as far as that, it reported FAILED on trying to stop dspam, >> so maybe it had crashed on the last in-message. I don't feel like trying >> again, though ... >> > Yes! This sounds like the problem. At least it sounds like a crashed DSPAM. I've bee running dspam 3.8 with a shared group at my RHEL5 production site for months built with --enable-debug (but not the other two) and it's been utterly stable. The DB's MySQL 5.0.22. It's a low-volume (around 1500 incoming messages per day) Postfix 2.4.6 site with dspam as a daemon content filter between the last two smtpd listeners. Best, --Tonni -- Tony Earnshaw Email: tonni at hetnet dot nl
