ith an smtp 55x before letting go of the client connection.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
than any other method.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
this list.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ith updates). dspam cannot resend lmtp, it
uses smtp. I don't use Cyrus for IMAP etc., I use Courier; Postfix hands
off via pipe to maildrop.
smtpd on 10025 -> dspam lmtp on 24 -> smtpd on 10026. I use an inet
socket rather than Unix to dspam.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 12-02-2008 06:46:
I have been trying to access the dspam website for over a week,
without success. I can access http://www.nuclearelephant.com/ just
fine, however it just redirects to http://dspam.nuclearelephant.com/
which is unaccessible. I cannot find any DNS
silently redirecting my DNS traffic.
In Amsterdam NL I have no problem with the url. Try the IP: 82.165.184.162.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
27;s
crontab.
The path to the dspam storage driver is readable by 'all', though that's
a red herring, since it has nothing to do with my cron scripts, which
are simply feeding stuff to dspam.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
that goes something like what's attached
- that's for my test machine where people have Maildir in their $HOME
directories; on my production machines Maildir is in a dedicated
/home/vmail/$OU/$UID hierarchy.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
#!/bin/sh
# R
The original 3.8.0 driver is pretty horrible at
reporting not finding things (debug log), but it doesn't make that
mistake in particular.
I haven't been through the affected code as I'm no expert there, but it
seems to me that the patch is dealing pretty thoroughly with merged
groups
Steve has a number of problems with the above dspam.conf, but it runs
fine in more or less the same configuration on my rigs.
Thanks!
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
x27;s.
As I wrote, I do not have this problem with 3.8.0, dspam is installed
from my own rpm spec both on FC6 and RHEL5.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
tributed a lot off list, but hasn't been able to do anything
about solving the problem(s). If there are any other FC or RHEL5 users
here willing to share experience running dspam as lmtp daemon (no GUI)
with Postfix 2.4 or newer then fine, otherwise I'm very happy with 3.8.0
fo
/dspam/group.
if not.. then where?
What does it say at the very top of your dspam.conf?
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ecessarily suit everybody's situation.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
something entirely different and had nothing to do with
the driver as such. I did write and tell you what the reason was.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
something entirely different ans had nothing to do with
the driver as such. I did write and tell you what the reason was.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
patched, code to do any better than straight 3.8.0, since nothing
affects Jonz' math portion. I'm already getting way above 99% for all
spam recognition on both home and production machines, with way less
than 0.5% false positives.
Fine 2008 to all.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
himself the oracle tries to push stuff down my throat that mucks up my
systems I react (yes, sometimes violently).
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
.
Thanks for the feedback Finn, (not). Steve gave feedback, you didn't.
Mind you, I shouldn't have expected much else.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
http://mirror.centos.org/centos/5.0/updates/i386/RPMS/squirrelmail-1.4.8-4.0.1..el5.centos.1.noarch.rpm.
Okay. Will look into that.
I'll get back to you off list on what I've done with your spec to date
and what won't build for me.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 24-12-2007 11:29:
[...]
In the mean time I'm trying to cope with your latest spec, which is
croaking in various different places (it's unnecessarily complicated
and does things it shouldn't); you'll have to give me time.
[...]
It'd probab
#x27;s strictly license):
http://mirror.centos.org/centos/5.0/updates/i386/RPMS/squirrelmail-1.4.8-4.0.1..el5.centos.1.noarch.rpm.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ches on stuff which, though it
might not work on Gentoo, still works perfectly on Red Hat RHEL5 and FC6
and (judging from what the CVS stuff does) sigsegvs when I don't want it
Steve, I appreciate the trouble you're going to here. I do things
differently from you, I'm Norwegian English and you're Swiss and no
doubt have your own philosophy. I think my method is kinder to my users
because they don't have to cope with command-line difficulties, even
though it probably forces them to install at least two back-end packages
and development packages they'll never use.
Now let's get on to the business of seeing why standalone CVS dspam
called from stdin sigsegvs on FC6 (the daemon doesn't)? Got any idea?
Why should I have to use useless Gentoo patches for curing problems I
don't have?
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 23-12-2007 15:32:
Steve skrev, on 23-12-2007 12:02:
[...]
I lied, it's still sigseving; back to 3.8.0 that doesn't. As I just
wrote in a post mainly to Steve, "I can't honestly see what
non-descriptive Gentoo patches can possibly do for FC6/RHELL
This is what happened:
/etc/cron.hourly/dspam.cron:
/etc/cron.hourly/dspam.cron: line 14: 3620 Segmentation fault
/usr/bin/dspam --class=spam --source=error --deliver=spam --user $mail
<$misclass >/dev/null 2>&1
It don't happen with 3.8.0 on RHEL5 nor FC6.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
y ;)
I still don't see the point of Gentoo patches on stuff which, though it
might not work on Gentoo, still works perfectly on Red Hat RHEL5 and FC6
and (judging from what the CVS stuff does) sigsegvs when I don't want it to.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 22-12-2007 10:58:
FWIW I get a SIGSEGV with CVS on FC6 when running dspam from stdin;
don't get it with 3.8.0.
CVS is a no-go for me.
I'll update my last post about available rpms.
This doesn't happen any more with CVS 0712220843, so I'll leave
speed.planet.nl/../uploads? This is a proftpd server
where you may upload, but neither you nor anyone see the files you've
uploaded, nor retrieve them.
I'm especially interested in this, since in spite of what I recently
reported about CVS now not sigseving any longer, it still is. I can't
honestly see what non-descriptive Gentoo patches can possibly do for
FC6/RHELL5 where dspam 3.8.0 is running well and stably, without memory
leaks or anything, for weeks at a time.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 13-12-2007 16:25:
[...]
FWIW I get a SIGSEGV with CVS on FC6 when running dspam from stdin;
don't get it with 3.8.0.
CVS is a no-go for me.
I'll update my last post about available rpms.
This doesn't happen any more with CVS 0712220843, so I'l
27;s not enough with already trained users. Would a
shared group apply better to my situation?
I use a shared group for my production site site and mostly it works
very well. The only disadvantage is that all users have to have the same
idea about what spam is - which isn't always the case
Nicolas Bouthors skrev, on 18-12-2007 15:37:
Le 18/12/2007 15:21, Tony Earnshaw écrivait :
On what basis do you read your users' mail to see whether it's spam or
not?
We're french, so every mail with a subject of "Vigara vholesale" and
"Fuck me dear", o
y lemming do so since you would expose subject,
senders of everyone in the group, and possibly the whole mail in
case of false positive.
The technical migration can't be more simpler, just change your group
file and VOILA ! :)
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
;) .
If there were enough interest I'd do stack traces on the unstripped
dspam binary. cron was kind enough to inform me of the crash.
Or are you working on fixing them?
I'm not a C programmer.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
it there's a new lot of patched stuff today).
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
y barriers.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 12-12-2007 11:26:
Hi Red Hat/Centos people,
If anybody cares, there are 2 FC6 dspam CVS rpms and an srpm that should
build on FC6, RHEL5 and CentOS5 on
ftp://ipd50aa34e.speed.planet.nl//pub/FedoraFC6rpms/dspam-3.8.0. I don't
think the srpm will build on earli
3.8.0.
CVS is a no-go for me.
I'll update my last post about available rpms.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
/attachment.cgi?id=138206).
Ok, it also applies cleanly to 071212 CVS too, so I've rebuilt both the
3.8.0 and CVS rpms with it.
Thanks :)
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Fernando Rodriguez skrev, on 11-12-2007 23:51:
I am trying to setup a configuration like yours, is there a way you can help
me or post your configuration files for dspam and postfix.
Actually, I did detail this to Steve in a later message - is that enough
detail?
Best,
--Tonni
--
Tony
h the back-end drivers in /usr/lib. The
CVS now insists on them being in the subdirectory dspam; that's ok with
me, so the new location is /usr/lib/dspam.
Anyway,
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
want, so I rebuilt with the original spec.
So it's --enable-bnr-debug which is crashing my daemon. But since that's
such an exotic feature, I don't feel like pursuing it.
HTH,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Juan Manuel skrev, on 10-12-2007 17:08:
Hello everyone,
Begin a new thread - me, I'm ignoring you. till you can be bothered to
keep to ML rules.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
port. You don't have a
fsck on bnr-debug support, anyway, unless you are up to Jonz in
intelligence and empirical knowledge ;)
With basic debug support my (admittedly Red Hat/Fedora) dspam never crashes.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
anti-UCE possibilities only a
tiny amount of spam/virus/trojan traffic actually gets through to dspam.
I watch dspam's system.log closely and generally blacklist in policyd
sites sending messages recognized as spam (S) by dspam.
HTH,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
me
(around 1500 incoming messages per day) Postfix 2.4.6 site with dspam as
a daemon content filter between the last two smtpd listeners.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 10-12-2007 02:03:
[...]
Ok, so I built an FC6 rpm from stock 3.8.0 source (a couple of
non-relevant CGI patches) with --enable-debug, --enable-verbose-debug
and --enable-bnr-debug and after a few in-messages dspam still hadn't
crashed. I have now got a bnr.log
tandard 3.8.0 code. But I suspect the
error to be in standard 3.8.0 code.
Well, it doesn't crash on Fedora FC6 and I suspect it wouldn't on RHEL5,
which is what I use in production.
[...]
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
led flags crashes
on her/his system?
Letth thuck it and thee.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
sites have already done before
they accept mail for that user at all.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
/usr/lib/libz.so.1.2.3
What does yours give?
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
cations?
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
"[dspam]" to the subject header if the PCRE regexp
/^X-DSPAM-Result:\s+Spam/ is true. After that, it directs it to a
directory it has made before, if it didn't already exist.
This probably won't help you much, but I hope it might give some food
for thought ;)
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
r training dspam.
If you clean out *everything* (have to, just cleaning out tokens ain't
enough) you might just as well drop the database and recreate. Make a
dump backup first.
Been there, seen it, done it ...
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
that anyone other than DJB has left his
community i any other state of disorientation than this.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
that anyone other than DJB has left his
community i any other state od disorientation than this.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
I don't think Jonz reads this stuff any longer; if he does, it's with
vague amusement about something he once did and doesn't any longer.
His "moratus esse" was published many moons ago.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
s. Even then most of
them couldn't care less and don't do anything.
I think that's about it. Thank you in advance for your help!
[1] (see above, vicious circle, n'est ce pas?).
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
dspam is concerned) witnesses great confusion. SpamAssassin
people might consider otherwise.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
dspam is concerned) witnesses great confusion. SpamAssassin
people might consider otherwise.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ript does not purge this token from the database.
How many different tokens would OP have to add to catch all virus, ever,
even in the future, that proper AV software already catch?
Sorry, but this is flogging a dead horse (as we in the knacker's trade
express it).
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
s. Both are gratis to non-corporate Linux
users.
You (I presume) don't use a hammer for knocking screws into wood or
steel. This is (supposed to be, sic) an analogy.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
n inet socket, as a daemon, on both
machines.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
* Postfix configuration. All my extraneous stuff
is in master.cf and thus configured for whatever Postfix service I choose.
That's why I sent the whole, stinking, master.cf and not my postfix -n.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ix - - n - - error
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ed them to
dspam - it's quite good at picking them up and quarantining them.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
nLDAP. And MySQL.
I'm a Unix/Linux sysadmin and used to thinking for myself.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ent Postfix - and a correctly configured
amavisd proxy, and ...
Hint: Google for altermime.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
mj romero skrev, on 06-11-2007 08:55:
[...]
What's going on? Any help I will be very useful. Thank you and
sorry for my English
What database backend are you using and how did you set it up in
dspam.conf? Have you built with, and enabled, debug?
--Tonni
--
Tony Ear
ck
[mysqld_safe]
err-log=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ike MyISAM - perhaps it has something to do with that.
Anyway, on InnoDB 'dspam_clean -p' works as desired ;)
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
InnoDB and gave up on the
purge*sql script many months ago - seem to remember it did nasty things.
I've been running 'dspam_clean -p' at two sites (with InnoDB) for said
months with nothing other than positive experience.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ility dspam_corpus which didn't need non-spam.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
TOUZEAU DAVID skrev, on 25-10-2007 17:40:
So how can i fix the undefined symbol DO_DEBUG probel without use
--enable-debug features ??
I don't advise you to - exactly the opposite; hein ... tu ne peut pas
lire l'anglais, ou?
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
en to many.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
if it helps:
ftp://ipd50aa34e.speed.planet.nl/
Try not to use the RHAS4 stuff, it's all old and often reflects immature
builds. Build from FC6 or RHL5 srpms, It'll build on CentOS4, *if* you
have the right libraries; it'll tell you if you don't.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
for using LDAP users
from ASCII First-Middle-Last names (particularly applicable to Dutch and
German names, "Bart van der Host", "Gijs Dutry van Haaften van Lelyveld"
etc.), but the Perl stuff includes an *awful* lot of Perl regexps and an
*awful* lot of swapping regexp ele
and wrote my own scripts for
adding/removing them from First-Middle-Last name ASCII lists.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Lisa Muir skrev, on 27-09-2007 11:55:
[...]
Tony Earnshaw suggested to me yesterday that integrating dspam into a
different stage of the delivery process was the way to go, and I
dismissed it at first thinking i'd like to stick with the default
deployment of dspam, but the more i think
staff or pupils (we've got the 4 directors trained). I
don't think any webgui whatsoever would help.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
OTS.
And thanks for the reply, I would ask this in the dspam-group, but, cannot
seem to post.
Dunno why, I can.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
y to use dspam.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
lter
daemon between two smtpd listeners is a lot cleaner than the way you're
doing it. dspam with a MySQL backend is remarkably fast - but you don't
really explain how or what.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
hat's not how InnoDB works.
You have MyISAM and you don't know the first thing you're talking about.
Over and out.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
pam
headers, and stuff), dspam could correct errors even if there is no
signatures... Am I dreaming here?
You're dreaming, that's not how it works ... if there's no signature, it
can't correlate the signature data with the tokens, doesn't know what
the original tokens w
signature is not present, the command above fails.
That's what the signature's for ... you're teaching it to reverse the
tokens that the signature points to, and they don't exist.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
es the subject and moves the message
to whichever user folder is appropriate. No headers other than Subject:
are affected.
I know that my method is different from yours, but the point is, that it
doesn't use Postfix at all. Perhaps you could try something similar?
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
ectly sure
if I can write "no copies of clean messages are stored in antispam
system".
Can't parse this ...
--Tonni
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
you've tried and doesn't work, as well as why you think it should work.
Report exactly what you are attempting to achieve, how and why.
Do not rely on so-called HOWTOs on the Internet; there are many of them
that are directly wrong and/or misleading.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
data table.
Start over and this time use a group. From a 1500 user base with a 16GB
MySQL InnoDB DB, using a shared group brought the DB back to 104MB,
while the total accuracy after 135000 ham/spam is still 99+%.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
)))
{
if (CTX->totals.innocent_learned + CTX->totals.innocent_classified > 2500) {
if (CTX->result == DSR_ISSPAM &&
_ds_match_attribute(agent_config, "TrackSources", "spam")) {
FILE *file;
char dropfile[MAX_FILENAME_LENGTH];
L
ckups of MySQL or LDAP databases is unnecessary, unless they're
extremely large.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Tony Earnshaw skrev, on 22-08-2007 08:37:
[...]
In the beginning I used the spam alias method, that's why it wasn't
possible to forge. I soon left that method, since it involved the users
thinking, and 95% of them aren't very good at that, which is why I
automated the whole
ated the whole dspam procedure, including automatic nag-nagging. If
you're using up-to-date Postfix you can enforce SASL auth and even make
it possible for unauthorized users to use Sendmail instead of smtp.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
it out. You have submitted a
hypothesis; now either provide proof, or produce a proof of concept.
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
more or less) pleased
with my own adaption. By and all I consider it better than his, but only
'cos I'm running (Courier) IMAP (and maildrop) for all my sites.
Very greatful for any help.
Well, s/greatful/grateful/g
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
s back to MyISAM and optimizing, or whatever) had no effect on the
15GB. Still, I didn't know any better ...
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
Raj skrev, on 05-08-2007 17:58:
changing over to teft gives me better results now
all the spam related to the one i discussed below
http://24x7server.net/spam.html concering USNMA is getting caught correctly
thanks for your help
You're welcome :)
--Tonni
--
Tony Earnshaw
Email: ton
er installing).
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
es in that directory.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
1 - 100 of 205 matches
Mail list logo
