DIYMacServer » Tag: DSpam

DIYMacServer » Tag: DSpam - Recent Posts http://diymacserver.com/forum/ DIYMacServer » Tag: DSpam - Recent Posts en Tue, 07 Feb 2012 07:17:08 +0000 Richard on "DSpam configuration" http://diymacserver.com/forum/topic/dspam-configuration#post-1654 Mon, 29 Aug 2011 04:19:37 +0000 Richard 1654@http://diymacserver.com/forum/ Micheal, it looks like your mail is not fed into Dspam therefore no signature is added and all fails. I think you have to look into the connection between postfix and dspam there lies the error. It could be configuration or a permission problem. Michael on "DSpam configuration" http://diymacserver.com/forum/topic/dspam-configuration#post-1643 Sat, 27 Aug 2011 21:57:01 +0000 Michael 1643@http://diymacserver.com/forum/ I've managed to configure and install DSpam, but it's not working correctly. I'm getting "postfix/qmgr warning: connect to transport private/dspam: No such file or directory" when I run the periodic script train.sh, I get "Unable to find a valid signature. Aborting." and "process_message returned error -5. dropping message." I'm not sure what I've done wrong. I've reverted, but we'd like to use dspam (or other anti-spam software on our server. The (coreduo mini) system is running Leopard. Nick on "_dspam and _vmail on 10.5.2 - postfix won't start" http://diymacserver.com/forum/topic/_dspam-and-_vmail-on-1052-postfix-wont-start#post-457 Sun, 20 Apr 2008 19:39:41 +0000 Nick 457@http://diymacserver.com/forum/ Thanks for all your help, and who would have thought that 2 spaces could have caused so much trouble.... Richard on "_dspam and _vmail on 10.5.2 - postfix won't start" http://diymacserver.com/forum/topic/_dspam-and-_vmail-on-1052-postfix-wont-start#post-456 Sun, 20 Apr 2008 19:18:59 +0000 Richard 456@http://diymacserver.com/forum/ Nick made a small error in his master.cf he forgot the spaces in the transport configurations second line: <pre><code>dspam unix - n n - 10 pipe flags=Ru user=_dspam <snipped> maildrop unix - n n - - pipe flags=DRhu user=_vmail argv=/usr/local/<snipped></code></pre> Should look like: <pre><code>dspam unix - n n - 10 pipe flags=Ru user=_dspam <snipped> maildrop unix - n n - - pipe flags=DRhu user=_vmail argv=/usr/<snipped></code></pre> Richard on "_dspam and _vmail on 10.5.2 - postfix won't start" http://diymacserver.com/forum/topic/_dspam-and-_vmail-on-1052-postfix-wont-start#post-455 Sun, 20 Apr 2008 18:42:59 +0000 Richard 455@http://diymacserver.com/forum/ Nick I need more info on when the error occurs, I've replied to your email. PLease send me a bigger chunk of the log. Nick on "_dspam and _vmail on 10.5.2 - postfix won't start" http://diymacserver.com/forum/topic/_dspam-and-_vmail-on-1052-postfix-wont-start#post-454 Sun, 20 Apr 2008 18:37:44 +0000 Nick 454@http://diymacserver.com/forum/ Hi, I have been following your excellent instructions and run in to a problem where postfix won't start. The problem are these two lines in the master.cf Machine details: Mac Mini, 10.5.2 maildrop unix - n n - - pipe flags=DRhu user=_vmail argv=/usr/local/bin/maildrop /etc/maildroprc -d ${user}@${nexthop} ${extension} ${recipient} ${user} ${nexthop} ${sender} dspam unix - n n - 10 pipe flags=Ru user=_dspam argv=/usr/local/bin/dspam --deliver=innocent --user ${recipient} -i - f $sender -- $recipient The complaint in the log is: bad transport type: user=_vmail The users were created using: sudo dscl . -create /Users/_vmail sudo dscl . -create /Users/_vmail UserShell /usr/bin/false sudo dscl . -create /Users/_vmail UniqueID 102 sudo dscl . -create /Users/_vmail PrimaryGroupID 102 sudo dscl . -create /Users/_vmail NFSHomeDirectory /var/empty sudo dscl . -passwd /Users/_vmail '' and sudo dscl . -create /Users/_dspam sudo dscl . -create /Users/_dspam UserShell /usr/bin/false sudo dscl . -create /Users/_dspam UniqueID 101 sudo dscl . -create /Users/_dspam PrimaryGroupID 101 sudo dscl . -create /Users/_dspam NFSHomeDirectory /usr/local/var/dspam sudo dscl . -passwd /Users/_dspam '' Any thoughts? Nick Richard on "LDAP authentication for dspam cgi" http://diymacserver.com/forum/topic/ldap-authentication-for-dspam-cgi#post-284 Sat, 27 Jan 2007 21:39:15 +0000 Richard 284@http://diymacserver.com/forum/ So you got it working but you'll have to add all the users manually to .htaccess ! Nice X-D grgcombs on "LDAP authentication for dspam cgi" http://diymacserver.com/forum/topic/ldap-authentication-for-dspam-cgi#post-283 Sat, 27 Jan 2007 21:31:35 +0000 grgcombs 283@http://diymacserver.com/forum/ Oh, maybe I wasn't clear ... I got LDAP authentication working with the previous post ... it's just a little clunky that you have to specify all the users who can access it ... but it does use ldap when it looks up their passwords. Greg Richard on "LDAP authentication for dspam cgi" http://diymacserver.com/forum/topic/ldap-authentication-for-dspam-cgi#post-282 Sat, 27 Jan 2007 09:08:41 +0000 Richard 282@http://diymacserver.com/forum/ I was unable to get the DSPAM website working as well for authenticated users, but I was trying to authenticate against the users in the database. I know very little of LDA so I can't really help you out there. I hope someone else could be of some assistance ? grgcombs on "LDAP authentication for dspam cgi" http://diymacserver.com/forum/topic/ldap-authentication-for-dspam-cgi#post-280 Sat, 27 Jan 2007 06:58:02 +0000 grgcombs 280@http://diymacserver.com/forum/ This was easy enough to set up once I found some examples.... Since I'm running Apple's OpenDirectory (LDAPv3) to maintain my users and passwords for all my machines, I figured I'd do it for DSPAM as well, so that I don't have to always maintain an .htpasswd file with encrypted passwords Here's what I put in my .htaccess file within my dspam.cgi directory... AuthType Basic AuthName LDAP AuthBasicProvider ldap AuthzLDAPAuthoritative on AuthLDAPURL ldap://localhost:389/cn=users,dc=gamura,dc=intranet,dc=net require ldap-user "user1" require ldap-user "user2" require ldap-user "user3" Please note, I was unsuccessful getting it to work with require "valid-user" Greg Richard on "DSPAM/postfx configuration problems" http://diymacserver.com/forum/topic/dspampostfx-configuration-problems#post-277 Fri, 26 Jan 2007 23:39:06 +0000 Richard 277@http://diymacserver.com/forum/ somehow when googling the error is caused by not having --enable-virtual-users in the biuld of DSPAM. Need to look at it more closely. Please look at the thread <a href="http://forum.richard5.net/viewtopic.php?t=14" rel="nofollow">http://forum.richard5.net/viewtopic.php?t=14</a> for more info on a setup like you wan't to accomplish. The virtual users can be cmpiled in but still local users can be used. It's just how dspam will administer them... grgcombs on "DSPAM/postfx configuration problems" http://diymacserver.com/forum/topic/dspampostfx-configuration-problems#post-274 Fri, 26 Jan 2007 18:53:19 +0000 grgcombs 274@http://diymacserver.com/forum/ I'm trying to setup dspam a little differently than richard, but not so different that this shouldn't work. I don't need/want virtual users. I DO want the dspam signature in the message (so I can do forwarding for training). In compiling dspam, I used the following parameters: ./configure --prefix=/usr \ --sysconfdir=/etc \ --localstatedir=/var \ --with-dspam_home=/var/dspam \ --with-storage-driver=mysql_drv \ --with-mysql-includes=/usr/local/mysql/include \ --with-mysql-libraries=/usr/local/mysql/lib \ --with-dspam-home-owner=dspam \ --with-dspam-home-group=postdrop \ --with-dspam-group=postdrop \ --with-dspam-mode=6755 \ --enable-preferences-extension \ --enable-signature-headers \ --enable-long-usernames \ --enable-daemon \ --enable-domain-scale From the standard /etc/dspam.conf I've changed: DeliveryHost 127.0.0.1 DeliveryPort 10026 DeliveryIdent localhost DeliveryProto SMTP Trust dspam Trust postfix Trust www Preference "spamAction=quarantine" Preference "signatureLocation=message" # 'message' or 'headers' Preference "showFactors=on" Preference "spamAction=tag" Preference "spamSubject=[SPAM]" MySQLServer /tmp/mysql.sock MySQLPort MySQLUser dspam MySQLPass booo MySQLDb dspam MySQLCompress true MySQLUIDInSignature on #since I'm working after spamassassin elsewhere IgnoreHeader X-Spam-Status IgnoreHeader X-Spam-Scanned IgnoreHeader X-Virus-Scanner-Result #not sure if I need these off, since I do my own training transports ParseToHeaders on ChangeModeOnParse on ChangeUserOnParse on ServerMode standard ServerParameters "--deliver=innocent, spam" ServerIdent "localhost.local" /etc/postfix/dspam_regexp (and built the db) /^spam-(.*)/ dspam-add:${1} /^ham-(.*)/ dspam-del:${1} /^(.*)/ dspam:${1} /etc/postfix/main.cf: transport_maps = regexp:/etc/postfix/dspam_regexp dspam_destination_recipient_limit =1 dspam-add_destination_recipient_limit = 1 dspam-fp_destination_recipient_limit = 1 /etc/postfix.master.cf: dspam-add unix - n n - - pipe flags=Rhq user=dspam argv=/usr/bin/dspam --user ${user}@${nexthop} --class=spam --source=error dspam-del unix - n n - - pipe flags=Rhq user=dspam argv=/usr/bin/dspam --user ${user}@${nexthop} --class=innocent --source=error dspam unix - n n - 10 pipe flags=Ru user=dspam argv=/usr/bin/dspam --deliver=innocent --user ${recipient} -i -f $sender -- $recipient localhost:10026 inet n - n - - smtpd -o content_filter= -o receive_override_options=no_unknown_recipient_checks -o smtpd_helo_restrictions= -o smtpd_client_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o smtpd_authorized_xforward_hosts=127.0.0.0/8 The result gives me what looks like some recursive loop .... /var/log/system.log: ..... Jan 26 09:38:48 gamura dspam[12534]: bailing on error -2 Jan 26 09:38:48 gamura dspam[12534]: received invalid result (! DSR_ISSPAM || DSR_INNOCENT) : -2 Jan 26 09:38:48 gamura dspam[12534]: process_message returned error -2. delivering. Jan 26 09:38:48 gamura dspam[12534]: Got error 554 in response to message data: 554 Error: too many hops^M\n Richard on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-249 Sun, 31 Dec 2006 16:24:56 +0000 Richard 249@http://diymacserver.com/forum/ Thanks for the update, need to do this myself as well but as I said before, I haven't received anything indicated as spam that wasn't spam yet... Keep me posted on the progres. For starting all over again, I think you can delete the user from the database and you would start over again. bohica on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-248 Thu, 28 Dec 2006 16:18:55 +0000 bohica 248@http://diymacserver.com/forum/ All of my mail was being identified as spam. I updated the daily script - with a definition at the top... NOTSPAM_VIRTUAL_FOLDER=.NotSpam and the section just above the line done < $USERFILE with the following... echo `date` Processing False Positives as Clean # check if the user has a .NotSpam folder if [ -d $VIRTUAL_BASE$MAILDIR$NOTSPAM_VIRTUAL_FOLDER ]; then echo Entered User NotSpam Folder # check both new and cur directories for notspam ! cd $VIRTUAL_BASE$MAILDIR$NOTSPAM_VIRTUAL_FOLDER/new for j in * do # check if the file exists if [ -s $j ]; then echo `date` Processing `pwd`/$j as Not Spam $DSPAM --user $USER --class=innocent --source=error < $j fi done cd $VIRTUAL_BASE$MAILDIR$NOTSPAM_VIRTUAL_FOLDER/cur for j in * do # check if the file exists if [ -s $j ]; then echo `date` Processing `pwd`/$j as Not Spam $DSPAM --user $USER --class=innocent --source=error < $j fi done else echo No NotSpam Folder fi it seems to work... but I will not know for a couple of days. I have not moved on to maildrop until I know that spam is properly identified. Thought I would share... I do not know what will happen if you move mail misidentified as spam into the NotSpam folder, and then leave it there to be processed multiple times? As for why things were being identified as spam -- the dspam factors were listing things like to: as .99 and things like subject *.is as .99. Wierd... we will see if it is just my configuration. Is there a way to reset the entire dspam stats for a specific user? Thanks! Richard on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-247 Wed, 20 Dec 2006 17:52:45 +0000 Richard 247@http://diymacserver.com/forum/ Nope, I didn't like the forwarding as then you need to put the dspam ID in the mailbody of the message as not all mail clients leave the header in the original message untouched. I hate putting stuff in emails that doesn't belong there, all messages that you would reply to would have something like: 2,458968cb103465209328925 in there. I also think that if you start a maildialog you would end up with multiple Id's in your message and I don't think DSpam would handle that properly. bohica on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-246 Wed, 20 Dec 2006 17:48:52 +0000 bohica 246@http://diymacserver.com/forum/ Yeah - came in today and everything I received overnight was tagged as SPAM. Of the 20 messages or so - 5 were not spam.... we shall see... Would you consider using the etc/postfix/transport method you originally tried so you could forward email to a cleaner address? Richard on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-245 Wed, 20 Dec 2006 17:43:00 +0000 Richard 245@http://diymacserver.com/forum/ Tim, don't worry about the commenting.... You are correct in your assumptions. I haven't encountered any false positives yet. But you can alter the existing training script to do this very easily. Create a mailbox folder called NotSpam. Rename the Junk folder in the script to NotSpam. Change the lines with:<code>  $DSPAM --user $USER --class=spam --source=error < $j</code> into: <code> $DSPAM --user $USER --class=ham --source=error < $j</code> And you are done, haven't gotten around to it myself but I think this should do it. Hope this helps you out. Are you getting any false positives ? bohica on "False positives?" http://diymacserver.com/forum/topic/false-positives#post-244 Wed, 20 Dec 2006 17:35:13 +0000 bohica 244@http://diymacserver.com/forum/ Richard - I posted on one of the blog pages before I remembered the forum. Sorry. In the dspam setup in the blog - have you forgotten to give instructions on how to address false positive retraining or did I miss it? Thanks!