Hi Steve, MTA = Postfix I have amavis - spamassassin - dspam installed. i think spamassassin scnas after dspam, cuase in the mail headers dspam comes at first. I use Dovecot as Imap Server OS = Gentoo Linux i put the config of dspam here = http://rafb.net/p/VCX8XO97.html if u need more confs just tell me , i can paste then marko Steve schrieb:> Hallo Marko > > This is not normal. DSPAM does not add the encoding. It must be something else you are using/doing to get that tagged with the encoding in front of every DSPAM tag. And I don't see the DSPAM signature in your header. This is not normal. If you have the other DSPAM header lines, then you should have the result as well. > > What MTA are you using? > How is the integration between MTA and DSPAM? > Do you have other filters running before and after DSPAM? > What IMAP server are you using? > What OS are you using? > Could you post your DSPAM config? > > > (Gr?sse aus Z?rich) > > // Steve > > -------- Original-Nachricht -------- > >> Datum: Sat, 15 Nov 2008 10:37:38 +0100 >> Von: Marko Weber <weber at zackbummfertig.de> >> An: "dspam-users at lists.nuclearelephant.com" <dspam-users at lists.nuclearelephant.com> >> Betreff: Re: [dspam-users] mysql fetch row error >> > > >> Hello Steve this is the "full" Header of a spam mail where the training >> also fails. >> withe the mysql fetch error............. >> >> marko >> >> >> Return-Path: <RoxieastronomerMyrick at fightingbobfest.org> >> X-Original-To: weber at salonwebserver.de >> Delivered-To: weber at salonwebserver.de >> Received: from localhost (localhost [127.0.0.1]) >> by salonwebserver.de (Postfix) with ESMTP id 02C8613BC09B >> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:38:09 +0100 >> (CET) >> X-DSPAM-Result: =?iso-8859-1?Q?Spam=0D?>> X-DSPAM-Confidence: =?iso-8859-1?Q?0.7177=0D?>> X-DSPAM-Probability: =?iso-8859-1?Q?1.0000=0D?>> ?iso-8859-1?Q?491de1b0254959695846858=0D?>> X-DSPAM-Factors: 15, >> X-Virus-Scanned: amavisd-new at salonwebserver.de >> X-Spam-Flag: NO >> X-Spam-Score: 2.415 >> X-Spam-Level: ** >> X-Spam-Status: No, score=2.415 tagged_above=-1000 required=2.5 >> tests=[DNS_FROM_SECURITYSAGE=0.127, RCVD_IN_BL_SPAMCOP_NET=2.188, >> RDNS_DYNAMIC=0.1] >> Received: from salonwebserver.de ([127.0.0.1]) >> by localhost (kraftwerk1.salonwebserver.de [127.0.0.1]) >> (amavisd-new, port 10024) >> with ESMTP id nOQQilMNvp-o for <weber at salonwebserver.de>; >> Fri, 14 Nov 2008 21:38:07 +0100 (CET) >> Received: from zackbummfertig.de >> (static.243.42.46.78.clients.your-server.de [78.46.42.243]) >> (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) >> (No client certificate requested) >> by salonwebserver.de (Postfix) with ESMTPS id E86BD13BC078 >> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:38:06 +0100 >> (CET) >> Received: from localhost (localhost [127.0.0.1]) >> by zackbummfertig.de (Postfix) with ESMTP id BC4BDECC067 >> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:37:46 +0100 >> (CET) >> X-Virus-Scanned: amavisd-new at zackbummfertig.de >> Received: from zackbummfertig.de ([127.0.0.1]) >> by localhost (weberweb.zackbummfertig.de [127.0.0.1]) >> (amavisd-new, port 10024) >> with ESMTP id xr6ayW0lyDGC for <weber at salonwebserver.de>; >> Fri, 14 Nov 2008 21:37:43 +0100 (CET) >> Received: from rachel22b12579 (unknown [78.146.113.186]) >> by zackbummfertig.de (Postfix) with SMTP id 3E83CECC040 >> for <tbmarcom at acidbunker.de>; Fri, 14 Nov 2008 21:37:43 +0100 >> (CET) >> Date: Fri, 14 Nov 2008 20:38:01 +0000 >> From: Chrystal Huddleston <RoxieastronomerMyrick at fightingbobfest.org> >> Subject: gambling slot machines >> To: tbmarcom at acidbunker.de >> Message-id: <7686026460.20081111151378 at fightingbobfest.org> >> Organization: fightingbobfest.org >> MIME-version: 1.0 >> Content-type: text/plain; charset=us-ascii >> Content-transfer-encoding: 7bit >> X-Priority: 3 (Normal) >> >> Steve schrieb: >> >>> Can you post the full header of the message in question? >>> >>> >>> -------- Original-Nachricht -------- >>> >>> >>>> Datum: Fri, 14 Nov 2008 23:18:39 +0100 >>>> Von: Marko Weber <weber at zackbummfertig.de> >>>> An: "dspam-users at lists.nuclearelephant.com" >>>> >> <dspam-users at lists.nuclearelephant.com> >> >>>> Betreff: Re: [dspam-users] mysql fetch row error >>>> >>>> >>> >>> >>>> Hi Steve, >>>> this sed thing dont worked for me...... sorry >>>> how i can get dspam working without this mysql fetch error ? >>>> u have any hints ? >>>> >>>> marko >>>> >>>> >>>> Steve schrieb: >>>> >>>> >>>>> -------- Original-Nachricht -------- >>>>> >>>>> >>>>> >>>>>> Datum: Fri, 14 Nov 2008 18:11:55 +0100 >>>>>> Von: Marko Weber <weber at zackbummfertig.de> >>>>>> An: "dspam-users at lists.nuclearelephant.com" >>>>>> >>>>>> >>>> <dspam-users at lists.nuclearelephant.com> >>>> >>>> >>>>>> Betreff: [dspam-users] mysql fetch row error >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>>>> Hello to all in the Mailinglist, >>>>>> >>>>>> i installed dspam on our server and it works so far that incoming >>>>>> >> mails >> >>>>>> are tagged by dspam. >>>>>> i installed "dovecot-antispam" for retraining. >>>>>> when in try to retrain a mail i get this in the dspam.debug log >>>>>> >>>>>> 9056: [11/14/2008 15:23:01] mysql_fetch_row() failed in >>>>>> >>>>>> >>>> _ds_get_signature >>>> >>>> >>>>>> in the /var/log/messages log i get this >>>>>> >>>>>> Nov 14 15:29:25 kraftwerk1 imap: antispam: /usr/bin/dspam >>>>>> >>>>>> >>>> --source=error >>>> >>>> >>>>>> --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?>>>>>> >> ... >> >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Signature retrieval for >>>>>> '=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Unable to find a valid >>>>>> signature. Aborting. >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: process_message returned >>>>>> >> error >> >>>>>> -5. dropping message. >>>>>> >>>>>> >>>>>> but when i search for the signatur 491d76cb23581804284693 in the >>>>>> >> mysql >> >>>>>> database i can find it there. >>>>>> >>>>>> what is this ?iso-8859-1?Q? , is this causing the error ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>> This means, that the plugin developer used the signature from the body >>>>> >>>>> >>>> instead of the one found in the header. You can verify yourself what >>>> >> the >> >>>> proper signature would be. Just issue this small one liner in sed: >>>> >>>> >>>>> sed -e '/^$/q' -ne 's/^X\-DSPAM\-Signature: >>>>> >>>>> >>>> \(\([1-9][0-9]*,\)\{0,1\}\([a-f0-9]\{20,32\}\)\)$/\1/p' >>>> >> /path/to/your/message >> >>>> >>>> >>>>> This should print out the proper signature DSPAM should receive from >>>>> >> the >> >>>>> >>>>> >>>> plugin. The iso-8859-1 part indicates to me that the message is taken >>>> >> from >> >>>> a iso8859-1 encoded message body. >>>> >>>> >>>>> >>>>> >>>>> >>>>>> do any1 need my dspam.conf , then i can paste it on web. >>>>>> >>>>>> thank for helping. >>>>>> >>>>>> marko >>>>>> >>>>>> >>>>>> >>>>>> >>>>> Steve >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
sorry wrong list Marko Weber schrieb:> Hi Steve, > > MTA = Postfix > I have amavis - spamassassin - dspam installed. > i think spamassassin scnas after dspam, cuase in the mail headers > dspam comes at first. > I use Dovecot as Imap Server > OS = Gentoo Linux > > i put the config of dspam here = http://rafb.net/p/VCX8XO97.html > > if u need more confs just tell me , i can paste then > > marko > > > > > Steve schrieb: >> Hallo Marko >> >> This is not normal. DSPAM does not add the encoding. It must be >> something else you are using/doing to get that tagged with the >> encoding in front of every DSPAM tag. And I don't see the DSPAM >> signature in your header. This is not normal. If you have the other >> DSPAM header lines, then you should have the result as well. >> >> What MTA are you using? >> How is the integration between MTA and DSPAM? >> Do you have other filters running before and after DSPAM? >> What IMAP server are you using? >> What OS are you using? >> Could you post your DSPAM config? >> >> >> (Gr?sse aus Z?rich) >> >> // Steve >> >> -------- Original-Nachricht -------- >> >>> Datum: Sat, 15 Nov 2008 10:37:38 +0100 >>> Von: Marko Weber <weber at zackbummfertig.de> >>> An: "dspam-users at lists.nuclearelephant.com" >>> <dspam-users at lists.nuclearelephant.com> >>> Betreff: Re: [dspam-users] mysql fetch row error >>> >> >> >>> Hello Steve this is the "full" Header of a spam mail where the >>> training also fails. >>> withe the mysql fetch error............. >>> >>> marko >>> >>> >>> Return-Path: <RoxieastronomerMyrick at fightingbobfest.org> >>> X-Original-To: weber at salonwebserver.de >>> Delivered-To: weber at salonwebserver.de >>> Received: from localhost (localhost [127.0.0.1]) >>> by salonwebserver.de (Postfix) with ESMTP id 02C8613BC09B >>> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:38:09 +0100 >>> (CET) >>> X-DSPAM-Result: =?iso-8859-1?Q?Spam=0D?>>> X-DSPAM-Confidence: =?iso-8859-1?Q?0.7177=0D?>>> X-DSPAM-Probability: =?iso-8859-1?Q?1.0000=0D?>>> ?iso-8859-1?Q?491de1b0254959695846858=0D?>>> X-DSPAM-Factors: 15, >>> X-Virus-Scanned: amavisd-new at salonwebserver.de >>> X-Spam-Flag: NO >>> X-Spam-Score: 2.415 >>> X-Spam-Level: ** >>> X-Spam-Status: No, score=2.415 tagged_above=-1000 required=2.5 >>> tests=[DNS_FROM_SECURITYSAGE=0.127, >>> RCVD_IN_BL_SPAMCOP_NET=2.188, >>> RDNS_DYNAMIC=0.1] >>> Received: from salonwebserver.de ([127.0.0.1]) >>> by localhost (kraftwerk1.salonwebserver.de [127.0.0.1]) >>> (amavisd-new, port 10024) >>> with ESMTP id nOQQilMNvp-o for <weber at salonwebserver.de>; >>> Fri, 14 Nov 2008 21:38:07 +0100 (CET) >>> Received: from zackbummfertig.de >>> (static.243.42.46.78.clients.your-server.de [78.46.42.243]) >>> (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) >>> (No client certificate requested) >>> by salonwebserver.de (Postfix) with ESMTPS id E86BD13BC078 >>> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:38:06 +0100 >>> (CET) >>> Received: from localhost (localhost [127.0.0.1]) >>> by zackbummfertig.de (Postfix) with ESMTP id BC4BDECC067 >>> for <weber at salonwebserver.de>; Fri, 14 Nov 2008 21:37:46 +0100 >>> (CET) >>> X-Virus-Scanned: amavisd-new at zackbummfertig.de >>> Received: from zackbummfertig.de ([127.0.0.1]) >>> by localhost (weberweb.zackbummfertig.de [127.0.0.1]) >>> (amavisd-new, port 10024) >>> with ESMTP id xr6ayW0lyDGC for <weber at salonwebserver.de>; >>> Fri, 14 Nov 2008 21:37:43 +0100 (CET) >>> Received: from rachel22b12579 (unknown [78.146.113.186]) >>> by zackbummfertig.de (Postfix) with SMTP id 3E83CECC040 >>> for <tbmarcom at acidbunker.de>; Fri, 14 Nov 2008 21:37:43 +0100 >>> (CET) >>> Date: Fri, 14 Nov 2008 20:38:01 +0000 >>> From: Chrystal Huddleston <RoxieastronomerMyrick at fightingbobfest.org> >>> Subject: gambling slot machines >>> To: tbmarcom at acidbunker.de >>> Message-id: <7686026460.20081111151378 at fightingbobfest.org> >>> Organization: fightingbobfest.org >>> MIME-version: 1.0 >>> Content-type: text/plain; charset=us-ascii >>> Content-transfer-encoding: 7bit >>> X-Priority: 3 (Normal) >>> >>> Steve schrieb: >>> >>>> Can you post the full header of the message in question? >>>> >>>> >>>> -------- Original-Nachricht -------- >>>> >>>>> Datum: Fri, 14 Nov 2008 23:18:39 +0100 >>>>> Von: Marko Weber <weber at zackbummfertig.de> >>>>> An: "dspam-users at lists.nuclearelephant.com" >>>>> >>> <dspam-users at lists.nuclearelephant.com> >>> >>>>> Betreff: Re: [dspam-users] mysql fetch row error >>>>> >>>> >>>>> Hi Steve, >>>>> this sed thing dont worked for me...... sorry >>>>> how i can get dspam working without this mysql fetch error ? >>>>> u have any hints ? >>>>> >>>>> marko >>>>> >>>>> >>>>> Steve schrieb: >>>>> >>>>>> -------- Original-Nachricht -------- >>>>>> >>>>>>> Datum: Fri, 14 Nov 2008 18:11:55 +0100 >>>>>>> Von: Marko Weber <weber at zackbummfertig.de> >>>>>>> An: "dspam-users at lists.nuclearelephant.com" >>>>>>> >>>>> <dspam-users at lists.nuclearelephant.com> >>>>> >>>>>>> Betreff: [dspam-users] mysql fetch row error >>>>>>> >>>>>> >>>>>>> Hello to all in the Mailinglist, >>>>>>> >>>>>>> i installed dspam on our server and it works so far that incoming >>>>>>> >>> mails >>> >>>>>>> are tagged by dspam. >>>>>>> i installed "dovecot-antispam" for retraining. >>>>>>> when in try to retrain a mail i get this in the dspam.debug log >>>>>>> >>>>>>> 9056: [11/14/2008 15:23:01] mysql_fetch_row() failed in >>>>>>> >>>>> _ds_get_signature >>>>> >>>>>>> in the /var/log/messages log i get this >>>>>>> >>>>>>> Nov 14 15:29:25 kraftwerk1 imap: antispam: /usr/bin/dspam >>>>>>> >>>>> --source=error >>>>>>> --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?>>>>>>> >>> ... >>> >>>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Signature retrieval for >>>>>>> '=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed >>>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Unable to find a valid >>>>>>> signature. Aborting. >>>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: process_message returned >>>>>>> >>> error >>>>>>> -5. dropping message. >>>>>>> >>>>>>> >>>>>>> but when i search for the signatur 491d76cb23581804284693 in the >>>>>>> >>> mysql >>>>>>> database i can find it there. >>>>>>> >>>>>>> what is this ?iso-8859-1?Q? , is this causing the error ? >>>>>>> >>>>>>> >>>>>> This means, that the plugin developer used the signature from the >>>>>> body >>>>>> >>>>> instead of the one found in the header. You can verify yourself what >>>>> >>> the >>> >>>>> proper signature would be. Just issue this small one liner in sed: >>>>> >>>>>> sed -e '/^$/q' -ne 's/^X\-DSPAM\-Signature: >>>>>> >>>>> \(\([1-9][0-9]*,\)\{0,1\}\([a-f0-9]\{20,32\}\)\)$/\1/p' >>>>> >>> /path/to/your/message >>> >>>>> >>>>>> This should print out the proper signature DSPAM should receive from >>>>>> >>> the >>> >>>>>> >>>>> plugin. The iso-8859-1 part indicates to me that the message is taken >>>>> >>> from >>> >>>>> a iso8859-1 encoded message body. >>>>> >>>>>> >>>>>>> do any1 need my dspam.conf , then i can paste it on web. >>>>>>> >>>>>>> thank for helping. >>>>>>> >>>>>>> marko >>>>>>> >>>>>>> >>>>>> Steve >>>>>> >>>>>> >>>>>> >>>>>>> >>>>>> >>>>> >>>> >>> >>> >> >> >