Hello Thorsten , Hello All in List,

i got to write again, ok : dspam workinng , dovecot-antispam working

moving mails to or out of spam seems to work and is listed in the logs; BUT the logs shows this on moving a mail to or from spam =

Nov 14 11:31:57 kraftwerk1 imap: antispam: /usr/bin/dspam --source=error --class=innocent --signature==?iso-8859-1?Q?1,491d521770551288576733=0D?= ... Nov 14 11:31:57 kraftwerk1 dspam[7203]: _ds_get_signature(): _mysql_drv_getpwuid(0) failed: aborting Nov 14 11:31:57 kraftwerk1 dspam[7203]: Signature retrieval for '=?iso-8859-1?Q?1,491d521770551288576733=0D?=' failed Nov 14 11:31:57 kraftwerk1 dspam[7203]: Unable to find a valid signature. Aborting. Nov 14 11:31:57 kraftwerk1 dspam[7203]: process_message returned error -5. dropping message.

incoming mails are scanned by user clamav and mails are moved now by user clamav after the the Tip of Thorsten adding this to dovecot.conf =

antispam_dspam_args = --user;clamav

the following point in the logs "mysql_drv_getpwuid(0)" , looks for me like dspam tries with User-ID 0 to work, but User clamav is in the mysql-db with User ID 1

do i have to set any special entires in dovecot.conf or dspam.conf ?

marko

Marko Weber schrieb:

Hello Thorsten, now on moving mail into SPAM folder seems okay in "dspam.debug" log =

16277: [11/14/2008 10:18:33] DSPAM Instance Startup 16277: [11/14/2008 10:18:33] input args: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?1,491d3cb5151261000521152=0D?= --user clamav 16277: [11/14/2008 10:18:33] pass-thru args: 16277: [11/14/2008 10:18:33] processing user clamav 16277: [11/14/2008 10:18:33] uid = 207, euid = 207, gid = 207, egid = 1000 16277: [11/14/2008 10:18:33] loading preferences for user clamav 16277: [11/14/2008 10:18:33] Loading preferences for uid 1 16277: [11/14/2008 10:18:33] Loading preferences for uid 0 16277: [11/14/2008 10:18:33] Loading preferences for uid 0 16277: [11/14/2008 10:18:33] default preferences empty. reverting to dspam.conf preferences. 16277: [11/14/2008 10:18:33] Loading preferences from dspam.conf 16277: [11/14/2008 10:18:33] using /var/spool/dspam/opt-in/local/clamav.dspam as path 16277: [11/14/2008 10:18:33] using /var/spool/dspam/opt-out/local/clamav.nodspam as path 16277: [11/14/2008 10:18:33] sedation level set to: 0 16277: [11/14/2008 10:18:33] DSPAM Instance Shutdown. Exit Code: 0

BUT, in systemlog /var/log/messages i get this =

Nov 14 10:20:25 kraftwerk1 imap: antispam: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?1,491d40b9162159695846858=0D?= ... Nov 14 10:20:25 kraftwerk1 dspam[16295]: _ds_get_signature(): _mysql_drv_getpwuid(0) failed: aborting Nov 14 10:20:25 kraftwerk1 dspam[16295]: Signature retrieval for '=?iso-8859-1?Q?1,491d40b9162159695846858=0D?=' failed Nov 14 10:20:25 kraftwerk1 dspam[16295]: Unable to find a valid signature. Aborting. Nov 14 10:20:25 kraftwerk1 dspam[16295]: process_message returned error -5. dropping message.

maybe its cause now all is done with user clamav, and before incoming mails was checked as user clamav and moving mails was done by user postfix... dunno but when incoming mails was scanned as user clamav and signatur was saved for clamav in db and now moving mails is also done by user clamav , why he cant finde the signatur ?

i also added user clamav & postfix as Trust <user> in dspam.conf

marko

Thorsten Vollmer schrieb:

...

On Thu, 2008-11-13 at 23:44 +0100, Marko Weber wrote:

...

Hello Thorsten, i got "dovecot-antispam" working now. also moving mails now fully work. but retraining dont seems to work fully.

emails that are delivered to mailbox are scanned with user "clamav"

28799: [11/13/2008 23:26:25] DSPAM Instance Startup 28799: [11/13/2008 23:26:25] input args: /usr/bin/dspam --stdout --deliver=spam,innocent --mode=tum --tokenizer=chained,noise --enable-signature-headers --user clamav 28799: [11/13/2008 23:26:25] pass-thru args: --tokenizer=chained,noise --enable-signature-headers 28799: [11/13/2008 23:26:25] processing user clamav 28799: [11/13/2008 23:26:25] uid = 105, euid = 105, gid = 449, egid = 1000 28799: [11/13/2008 23:26:25] loading preferences for user clamav 28799: [11/13/2008 23:26:25] Loading preferences for uid 1

i dont have a maildrop filter ready yet that move spam tagged mails into SPAM folder. all is delivered to "incoming". when i now move the mail to SPAM; this is done by user "postfix"

28917: [11/13/2008 23:40:17] DSPAM Instance Startup 28917: [11/13/2008 23:40:17] input args: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?1,491930ac25229173225906=0D?= 28917: [11/13/2008 23:40:17] pass-thru args: 28917: [11/13/2008 23:40:17] processing user postfix 28917: [11/13/2008 23:40:17] uid = 207, euid = 207, gid = 207, egid = 1000 28917: [11/13/2008 23:40:17] loading preferences for user postfix 28917: [11/13/2008 23:40:17] Loading preferences for uid 6 28917: [11/13/2008 23:40:17] Loading preferences for uid 0 28917: [11/13/2008 23:40:17] Loading preferences for uid 0 28917: [11/13/2008 23:40:17] default preferences empty. reverting to dspam.conf preferences. 28917: [11/13/2008 23:40:17] Loading preferences from dspam.conf 28917: [11/13/2008 23:40:17] using /var/spool/dspam/opt-in/local/postfix.dspam as path 28917: [11/13/2008 23:40:17] using /var/spool/dspam/opt-out/local/postfix.nodspam as path 28917: [11/13/2008 23:40:17] sedation level set to: 0 28917: [11/13/2008 23:40:17] DSPAM Instance Shutdown. Exit Code: 0

Now when i move the mail again into incoming (also done by user postfix), the mail dont get tagged with "innocent" , it is still tagged "spam".

How do i get it work all under "clamav"

If you really have a single user for DSPAM, add "antispam_dspam_args = --user;clamav" to dovecot.conf.

Also, the user running dovecot's mail process needs to be trusted by DSPAM.

...

and why are the removed mails from spam to incoming not tagged with "inncoent" ?

dovecot-antispam does not change any headers of the messages you move.

...

(do you need any logs?)

thank you

marko

--

-- *Marko Weber* | Administration

*SALON DIGITAL* Media GmbH Rothenbaumchaussee 19a 20148 Hamburg

T. (040) 429 48 68 - 23 F. (040) 429 48 68 - 20

marko.weber@salondigital.de mailto:marko.weber@salondigital.de www.salondigital.de http://www.salondigital.de

-- Geschäftsführung: Stephan Michalik, Ekkehart Opitz Registergericht: Amtsgericht Hamburg, NR: HRB 78111

NOTE: This communication is confidential and is intended for the use of the individual or entity to which it is directed. It may contain information that is privileged and exempt from disclosure under applicable law. If you are not the intended recipient please notify us immediately. You should not copy it or disclose its contents to any other person.

Hi Thorsten,

now it looks different to old log before,

I disabled "MySQLUIDInSignature" like you said , now when i move a mail to SPAM folder "dspam.debug" tells this =

2376: [11/14/2008 14:02:51] DSPAM Instance Startup 2376: [11/14/2008 14:02:51] input args: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?= --user clamav 2376: [11/14/2008 14:02:51] pass-thru args: 2376: [11/14/2008 14:02:51] processing user clamav 2376: [11/14/2008 14:02:51] uid = 207, euid = 207, gid = 207, egid = 1000 2376: [11/14/2008 14:02:51] loading preferences for user clamav 2376: [11/14/2008 14:02:51] Loading preferences for uid 1 2376: [11/14/2008 14:02:51] Loading preferences for uid 0 2376: [11/14/2008 14:02:51] Loading preferences for uid 0 2376: [11/14/2008 14:02:51] default preferences empty. reverting to dspam.conf preferences. 2376: [11/14/2008 14:02:51] Loading preferences from dspam.conf 2376: [11/14/2008 14:02:51] using /var/spool/dspam/opt-in/local/clamav.dspam as path 2376: [11/14/2008 14:02:51] using /var/spool/dspam/opt-out/local/clamav.nodspam as path 2376: [11/14/2008 14:02:51] sedation level set to: 0 2376: [11/14/2008 14:02:51] mysql_fetch_row() failed in _ds_get_signature 2376: [11/14/2008 14:02:51] DSPAM Instance Shutdown. Exit Code: 0

failed on fetch_row

the /var/log/messages tells this =

Nov 14 14:02:51 kraftwerk1 imap: antispam: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?= ... Nov 14 14:02:51 kraftwerk1 dspam[2376]: Signature retrieval for '=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed Nov 14 14:02:51 kraftwerk1 dspam[2376]: Unable to find a valid signature. Aborting. Nov 14 14:02:51 kraftwerk1 dspam[2376]: process_message returned error -5. dropping message.

when i search with phpmyadmin in the database the signatur 491d76cb23581804284693 is there.

i really dont get it what can be wrong.

thanks

marko

Thorsten Vollmer schrieb:

On Fri, 2008-11-14 at 11:40 +0100, Marko Weber wrote:

...

Hello Thorsten , Hello All in List,

i got to write again, ok : dspam workinng , dovecot-antispam working

moving mails to or out of spam seems to work and is listed in the logs; BUT the logs shows this on moving a mail to or from spam =

Nov 14 11:31:57 kraftwerk1 imap: antispam: /usr/bin/dspam --source=error --class=innocent --signature==?iso-8859-1?Q?1,491d521770551288576733=0D?= ... Nov 14 11:31:57 kraftwerk1 dspam[7203]: _ds_get_signature(): _mysql_drv_getpwuid(0) failed: aborting Nov 14 11:31:57 kraftwerk1 dspam[7203]: Signature retrieval for '=?iso-8859-1?Q?1,491d521770551288576733=0D?=' failed Nov 14 11:31:57 kraftwerk1 dspam[7203]: Unable to find a valid signature. Aborting. Nov 14 11:31:57 kraftwerk1 dspam[7203]: process_message returned error -5. dropping message.

incoming mails are scanned by user clamav and mails are moved now by user clamav after the the Tip of Thorsten adding this to dovecot.conf =

antispam_dspam_args = --user;clamav

I just realized that you enabled MySQLUIDInSignature. Thus specifying the user is not strictly necessary.

You may also try to disable MySQLUIDInSignature.

...

the following point in the logs "mysql_drv_getpwuid(0)" , looks for me like dspam tries with User-ID 0 to work, but User clamav is in the mysql-db with User ID 1

do i have to set any special entires in dovecot.conf or dspam.conf ?

marko

--

-- *Marko Weber* | Administration

*SALON DIGITAL* Media GmbH Rothenbaumchaussee 19a 20148 Hamburg

T. (040) 429 48 68 - 23 F. (040) 429 48 68 - 20

marko.weber@salondigital.de mailto:marko.weber@salondigital.de www.salondigital.de http://www.salondigital.de

-- Geschäftsführung: Stephan Michalik, Ekkehart Opitz Registergericht: Amtsgericht Hamburg, NR: HRB 78111

NOTE: This communication is confidential and is intended for the use of the individual or entity to which it is directed. It may contain information that is privileged and exempt from disclosure under applicable law. If you are not the intended recipient please notify us immediately. You should not copy it or disclose its contents to any other person.