Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 16:37:02 -0700 (PDT) john espiro wrote: > > For older messages that had viruses attached, I saw the following line in the > maillog: > dspam[5873]: virus warning: infected message from 60.249.84.10 > > However when I send viruses from my account to another domain account,

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
For older messages that had viruses attached, I saw the following line in the maillog: dspam[5873]: virus warning: infected message from 60.249.84.10 However when I send viruses from my account to another domain account, nothing appears in the logs at all regarding the catching of the virus (w

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 15:36:55 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > I have no idea... how would I determine the answer to your questions? I > never configured procmail, and it was installed on my system from the very > beginning. That line in the dspam.conf always pea

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
Hi Stevan - I have no idea... how would I determine the answer to your questions? I never configured procmail, and it was installed on my system from the very beginning. That line in the dspam.conf always peaked my curiosity -- but since I can move other messages from quarantine (virus ones a

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 12:23:10 -0700 (PDT) john espiro wrote: > Yes - procmail v3.22 2001/09/10 > And the web server user is able to call /usr/bin/procmail? And have you configured procmail to work on your setup or is it just installed but not configured? > John > -- Kind Regards from Switzer

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
Yes - procmail v3.22 2001/09/10 John From: Stevan Bajić Do you have procmail installed on your system? -- Download Intel® Parallel Studio Eval Try the new software tools for you

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 11:51:08 -0700 (PDT) john espiro wrote: > TrustedDeliveryAgent "/usr/bin/procmail" > UntrustedDeliveryAgent "/usr/bin/procmail -d %u" > Do you have procmail installed on your system? > "DeliveryHost", "DeliveryPort", "DeliveryIdent" and "DeliveryProto" are all > commented

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
TrustedDeliveryAgent "/usr/bin/procmail" UntrustedDeliveryAgent "/usr/bin/procmail -d %u" "DeliveryHost", "DeliveryPort", "DeliveryIdent" and "DeliveryProto" are all commented out. John From: Stevan Bajić What do you use for "TrustedDeliveryAgent" and for "U

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 10:25:38 -0700 (PDT) john espiro wrote: > I am guessing this is a clamav question -- feel free to tell me to move it to > another list. > > If I have a message in quarantine that was marked with a virus, and I choose > to "deliver" the message via the quarantine UI, it remo

Re: [Dspam-user] Clamav response

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 10:20:11 -0700 (PDT) john espiro wrote: > Wow, OK -- am going to go through this email now. > If I receive an email from a user on my whitelist, and there is a virus, the > email then goes to quarantine -- that's the point. > But does that email affect the training? In other

[Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
I am guessing this is a clamav question -- feel free to tell me to move it to another list. If I have a message in quarantine that was marked with a virus, and I choose to "deliver" the message via the quarantine UI, it removes it from the quarantine list, but it never makes it to my inbox. Is

Re: [Dspam-user] training time?

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 17:47:41 +0200 Stevan Bajić wrote: > On Thu, 15 Apr 2010 17:35:43 +0800 > Michael Alger wrote: > > [...] > > However, I don't understand why simply classifying a message using > > TOE decrements the Training Left counter. My understanding is that > > token statistics are onl

Re: [Dspam-user] training time?

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 17:35:43 +0800 Michael Alger wrote: [...] > However, I don't understand why simply classifying a message using > TOE decrements the Training Left counter. My understanding is that > token statistics are only updated when retraining a misclassified > message; classifying a mess

Re: [Dspam-user] I have trained dspam but DSPAM still can't catch my spam. why?

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 06:25:23 -0700 (PDT) kt nguyen wrote: > > Hi! > I use local network, there some virtual user as some user mail. Now user1 > send a spam mail (i copy from spam mail of yahoo mail) to user2, but dspam > identify it as good mail. user2 use web-ui to retrain that mail as spam,

[Dspam-user] I have trained dspam but DSPAM still can't catch my spam. why?

2010-04-15 Thread kt nguyen
Hi! I use local network, there some virtual user as some user mail. Now user1 send a spam mail (i copy from spam mail of yahoo mail) to user2, but dspam identify it as good mail. user2 use web-ui to retrain that mail as spam, and then user1 resend that mail but dspam still not catch it, Why? Pl

Re: [Dspam-user] training time?

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 17:35:43 +0800 Michael Alger wrote: [...] > Thank you for this explanation and after a quick test I see that the > TL counter does decrement (and TN increments) when I process mail > using TOE. If I set it to NOTRAIN, then none of the statistics are > updated when the message

Re: [Dspam-user] training time?

2010-04-15 Thread Michael Alger
On Mon, Apr 12, 2010 at 09:18:43PM +0200, Stevan Bajić wrote: > On Sat, 10 Apr 2010 17:59:25 +0800 > Michael Alger wrote: > > On Fri, Apr 09, 2010 at 11:23:16PM -0700, Terry Barnum wrote: > > >>> I've been running DSPAM for approximately 2 weeks and looking > > >>> at the output of dspam_stats, I'