[Dspam-user] Signature retrieval for '%s' failed

classic Classic list List threaded Threaded
17 messages Options
Reply | Threaded
Open this post in threaded view
|

[Dspam-user] Signature retrieval for '%s' failed

Guillaume
Hello,

I'm running into an issue with DSPAM and Dovecot with this setup :
- Ubuntu Server 14.04.1

- Dovecot 2.2.9 with dovecot-antispam
     plugin {
       antispam_allow_append_to_spam = YES
       antispam_backend = dspam
       antispam_debug_target = syslog
       antispam_dspam_args =
--deliver;--user;%u;--source=error;--signature=%%s
       antispam_dspam_binary = /usr/bin/dspam
       antispam_dspam_result_header = X-DSPAM-Result
       antispam_signature = X-DSPAM-Signature
       antispam_signature_missing = error
       antispam_skip_from_line = NO
       antispam_spam = Spam
       antispam_trash = Trash
       sieve = ~/.dovecot.sieve
       sieve_default = /etc/dovecot/sieve/global.sieve
       sieve_dir = ~/sieve
       sieve_global_dir = /etc/dovecot/sieve/
       sieve_global_path = /etc/dovecot/sieve/global.sieve
     }

- DSPAM 3.10.2
     Configuration parameters:  '--prefix=/usr'
'--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
'--infodir=${prefix}/share/info' '--sysconfdir=/etc'
'--localstatedir=/var' '--libdir=${prefix}/lib/x86_64-linux-gnu'
'--libexecdir=${prefix}/lib/x86_64-linux-gnu'
'--disable-maintainer-mode' '--build=x86_64-linux-gnu'
'--host=x86_64-linux-gnu' '--sysconfdir=/etc/dspam'
'--disable-dependency-tracking' '--enable-split-configuration'
'--enable-static' '--enable-external-lookup' '--enable-syslog'
'--with-logdir=/var/log/dspam/' '--with-dspam-home=/var/spool/dspam'
'--enable-domain-scale' '--with-delivery-agent=/usr/bin/procmail'
'--enable-daemon' '--with-mysql-includes=/usr/include/mysql'
'--with-pgsql-includes=/usr/include/postgresql'
'--with-storage-driver=hash_drv,mysql_drv,pgsql_drv,sqlite3_drv'
'--enable-debug' '--enable-virtual-users'
'--enable-preferences-extension' '--enable-clamav'
'build_alias=x86_64-linux-gnu' 'host_alias=x86_64-linux-gnu' 'CFLAGS=-g
-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro
-Wl,-z,defs -Wl,--as-needed' 'CPPFLAGS=-D_FORTIFY_SOURCE=2'

     TrainingMode teft
     TestConditionalTraining off
     Feature noise
     Feature whitelist
     Algorithm graham burton
     Tokenizer osb
     Preference "spamAction=tag"
     Preference "signatureLocation=headers"  # 'message' or 'headers'
     Preference "showFactors=off"
     Preference "trainingMode=TEFT"
     Preference "spamSubject=[SPAM] "
     AllowOverride trainingMode
     AllowOverride spamAction spamSubject
     AllowOverride statisticalSedation
     AllowOverride enableBNR
     AllowOverride enableWhitelist
     AllowOverride signatureLocation
     AllowOverride showFactors
     AllowOverride optIn optOut
     AllowOverride whitelistThreshold


When I'm moving a spam from my Spam folder to another folder (or from
another folder to my Spam folder), I got this error :
Signature retrieval for '%s' failed. Unable to find a valid signature.
Aborting.

Here's the concerned email header :

X-DSPAM-Result: Spam
X-DSPAM-Processed: Mon Jan  5 15:05:07 2015
X-DSPAM-Confidence: 0.9982
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: 54aa9a1318642065924526

With debug mode enabled, i have more details :
input args: /usr/bin/dspam --source=error --class=innocent
--signature=54aa9a1318642065924526 --deliver --user XXXXXXX
--source=error --signature=%s

Running this command works fine (as root, i got nothing printed as dspam) :
$ dspam --user XXXXX --class=innocent --source=error
--signature=54aa9a1318642065924526 --stdout --deliver=summary
X-DSPAM-Result: XXXXXX; result="Innocent"; class="Innocent";
probability=0.0000; confidence=0.00; signature=54aa9a1318642065924526

I updated my dovecot antispam_dspam_args parameter to this, hoping to
remove the second signature parameter : --deliver;--user;%u

But it still the same issue.
Maybe this extra signature=%s comes from dovecot-antispam ?

Regards,

Guillaume

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Tom Hendrikx
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 05-01-15 19:45, Guillaume wrote:

> Hello,
>
> I'm running into an issue with DSPAM and Dovecot with this setup :
> - Ubuntu Server 14.04.1
>
> - Dovecot 2.2.9 with dovecot-antispam plugin {
> antispam_allow_append_to_spam = YES antispam_backend = dspam
> antispam_debug_target = syslog antispam_dspam_args =
> --deliver;--user;%u;--source=error;--signature=%%s
> antispam_dspam_binary = /usr/bin/dspam antispam_dspam_result_header
> = X-DSPAM-Result antispam_signature = X-DSPAM-Signature
> antispam_signature_missing = error antispam_skip_from_line = NO
> antispam_spam = Spam antispam_trash = Trash sieve =
> ~/.dovecot.sieve sieve_default = /etc/dovecot/sieve/global.sieve
> sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/
> sieve_global_path = /etc/dovecot/sieve/global.sieve }
>
> - DSPAM 3.10.2 Configuration parameters:  '--prefix=/usr'
> '--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
> '--infodir=${prefix}/share/info' '--sysconfdir=/etc'
> '--localstatedir=/var' '--libdir=${prefix}/lib/x86_64-linux-gnu'
> '--libexecdir=${prefix}/lib/x86_64-linux-gnu'
> '--disable-maintainer-mode' '--build=x86_64-linux-gnu'
> '--host=x86_64-linux-gnu' '--sysconfdir=/etc/dspam'
> '--disable-dependency-tracking' '--enable-split-configuration'
> '--enable-static' '--enable-external-lookup' '--enable-syslog'
> '--with-logdir=/var/log/dspam/'
> '--with-dspam-home=/var/spool/dspam' '--enable-domain-scale'
> '--with-delivery-agent=/usr/bin/procmail' '--enable-daemon'
> '--with-mysql-includes=/usr/include/mysql'
> '--with-pgsql-includes=/usr/include/postgresql'
> '--with-storage-driver=hash_drv,mysql_drv,pgsql_drv,sqlite3_drv'
> '--enable-debug' '--enable-virtual-users'
> '--enable-preferences-extension' '--enable-clamav'
> 'build_alias=x86_64-linux-gnu' 'host_alias=x86_64-linux-gnu'
> 'CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
>  -Werror=format-security' 'LDFLAGS=-Wl,-Bsymbolic-functions
> -Wl,-z,relro -Wl,-z,defs -Wl,--as-needed'
> 'CPPFLAGS=-D_FORTIFY_SOURCE=2'
>
> TrainingMode teft TestConditionalTraining off Feature noise Feature
> whitelist Algorithm graham burton Tokenizer osb Preference
> "spamAction=tag" Preference "signatureLocation=headers"  #
> 'message' or 'headers' Preference "showFactors=off" Preference
> "trainingMode=TEFT" Preference "spamSubject=[SPAM] " AllowOverride
> trainingMode AllowOverride spamAction spamSubject AllowOverride
> statisticalSedation AllowOverride enableBNR AllowOverride
> enableWhitelist AllowOverride signatureLocation AllowOverride
> showFactors AllowOverride optIn optOut AllowOverride
> whitelistThreshold
>
>
> When I'm moving a spam from my Spam folder to another folder (or
> from another folder to my Spam folder), I got this error :
> Signature retrieval for '%s' failed. Unable to find a valid
> signature. Aborting.
>
> Here's the concerned email header :
>
> X-DSPAM-Result: Spam X-DSPAM-Processed: Mon Jan  5 15:05:07 2015
> X-DSPAM-Confidence: 0.9982 X-DSPAM-Probability: 1.0000
> X-DSPAM-Signature: 54aa9a1318642065924526
>
> With debug mode enabled, i have more details : input args:
> /usr/bin/dspam --source=error --class=innocent
> --signature=54aa9a1318642065924526 --deliver --user XXXXXXX
> --source=error --signature=%s
>
> Running this command works fine (as root, i got nothing printed as
> dspam) : $ dspam --user XXXXX --class=innocent --source=error
> --signature=54aa9a1318642065924526 --stdout --deliver=summary
> X-DSPAM-Result: XXXXXX; result="Innocent"; class="Innocent";
> probability=0.0000; confidence=0.00;
> signature=54aa9a1318642065924526
>
> I updated my dovecot antispam_dspam_args parameter to this, hoping
> to remove the second signature parameter : --deliver;--user;%u
>
> But it still the same issue. Maybe this extra signature=%s comes
> from dovecot-antispam ?
>

Sure looks like it. What hapens if you remove the '--signature=%%s'
from the antispam plugin args?

Tom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=zjqz
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Same issue as I said :)

I updated my dovecot antispam_dspam_args parameter to this, hoping
to remove the second signature parameter : --deliver;--user;%u

But it's still the same issue.


   Guillaume Hilt

Le 06/01/2015 12:25, Tom Hendrikx a écrit :
> >I updated my dovecot antispam_dspam_args parameter to this, hoping
> >to remove the second signature parameter : --deliver;--user;%u
> >
> >But it still the same issue. Maybe this extra signature=%s comes
> >from dovecot-antispam ?


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
In dovecot-antispam source dspam.c, there's this line :
tmp = "--source=error;--signature=%s";

Isn't my issue related to it ? It sure looks like what's added at the
end of the input args
Shouldn't it be %%s ?

When i'm trying to compile dovecot-antispam sources (having added the
maybe missing%) I got this error :
No rule to make target `aux.c', needed by `depend'

   Guillaume Hilt

Le 06/01/2015 12:36, Guillaume a écrit :

> Same issue as I said :)
>
> I updated my dovecot antispam_dspam_args parameter to this, hoping
> to remove the second signature parameter : --deliver;--user;%u
>
> But it's still the same issue.
>
>
>     Guillaume Hilt
>
> Le 06/01/2015 12:25, Tom Hendrikx a écrit :
>>> I updated my dovecot antispam_dspam_args parameter to this, hoping
>>> to remove the second signature parameter : --deliver;--user;%u
>>>
>>> But it still the same issue. Maybe this extra signature=%s comes
>> >from dovecot-antispam ?
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Ok, I managed to compile it.

It's working fine now :
5372: [01/07/2015 23:05:40] input args: /usr/bin/dspam --deliver --user
XXXXXX --source=error --signature=54ac5c40181054136714457 --class=innocent
5372: [01/07/2015 23:05:40] pass-thru args: --deliver
5372: [01/07/2015 23:05:40] processing user XXXX
5372: [01/07/2015 23:05:40] uid = 5000, euid = 5000, gid = 5000, egid = 119

All I dit was editing src/dspam.c line 177 from
tmp = "--source=error;--signature=%s";

To :
tmp = "--source=error;--signature=%%s";

   Guillaume Hilt

Le 07/01/2015 13:28, Guillaume a écrit :

> In dovecot-antispam source dspam.c, there's this line :
> tmp = "--source=error;--signature=%s";
>
> Isn't my issue related to it ? It sure looks like what's added at the
> end of the input args
> Shouldn't it be %%s ?
>
> When i'm trying to compile dovecot-antispam sources (having added the
> maybe missing%) I got this error :
> No rule to make target `aux.c', needed by `depend'
>
>     Guillaume Hilt
>
> Le 06/01/2015 12:36, Guillaume a écrit :
>> Same issue as I said :)
>>
>> I updated my dovecot antispam_dspam_args parameter to this, hoping
>> to remove the second signature parameter : --deliver;--user;%u
>>
>> But it's still the same issue.
>>
>>
>>      Guillaume Hilt
>>
>> Le 06/01/2015 12:25, Tom Hendrikx a écrit :
>>>> I updated my dovecot antispam_dspam_args parameter to this, hoping
>>>> to remove the second signature parameter : --deliver;--user;%u
>>>>
>>>> But it still the same issue. Maybe this extra signature=%s comes
>>> >from dovecot-antispam ?
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Mmmh, spoke too fast.
It's better but not fixed.

Moving a mail to spam folder :

==> ../dspam/dspam.debug <==
6329: [01/07/2015 23:14:38] DSPAM Instance Startup
6329: [01/07/2015 23:14:38] input args: /usr/bin/dspam --deliver --user
XXXXXX --source=error --signature=54ac0490181051388914240 --class=spam
6329: [01/07/2015 23:14:38] pass-thru args: --deliver
6329: [01/07/2015 23:14:38] processing user XXXXXX
6329: [01/07/2015 23:14:38] uid = 5000, euid = 5000, gid = 5000, egid = 119
6329: [01/07/2015 23:14:38] loading preferences for user XXXXXX
6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
struct for name: XXXXXX
6329: [01/07/2015 23:14:38] Loading preferences for uid 16
6329: [01/07/2015 23:14:38] Loading preferences for uid 0
6329: [01/07/2015 23:14:38] Loading preferences for uid 0
6329: [01/07/2015 23:14:38] default preferences empty. reverting to
dspam.conf preferences.
6329: [01/07/2015 23:14:38] Loading preferences from dspam.conf
6329: [01/07/2015 23:14:38] using /var/spool/dspam/opt-in/XXXX/XXX.dspam
as path
6329: [01/07/2015 23:14:38] using
/var/spool/dspam/opt-out/XXXX/XXXX.nodspam as path
6329: [01/07/2015 23:14:38] sedation level set to: 0
6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
struct for name: XXXXXX
6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam returning cached name
XXXXXX.
6329: [01/07/2015 23:14:38] _ds_get_signature: mysql_fetch_row() failed
6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam returning cached name
XXXXXX.
6329: [01/07/2015 23:14:38] DSPAM Instance Shutdown.  Exit Code: 0

==> mail.log <==
Jan  7 23:14:38 rendez-vous dspam[6329]: Signature retrieval for
'54ac0490181051388914240' failed
Jan  7 23:14:38 rendez-vous dspam[6329]: Unable to find a valid
signature. Aborting.
Jan  7 23:14:38 rendez-vous dspam[6329]: process_message returned error
-5.  dropping message.

(tested with mysql access definied in mysql.conf)
SELECT *
FROM `dspam_signature_data`
WHERE `signature` = '54ac0490181051388914240'

uid     signature     data     length     created_on
143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06

I don't understand why _ds_get_signature can't find a valid signature
since it exists in database.

   Guillaume Hilt

Le 07/01/2015 23:07, Guillaume a écrit :

> Ok, I managed to compile it.
>
> It's working fine now :
> 5372: [01/07/2015 23:05:40] input args: /usr/bin/dspam --deliver --user
> XXXXXX --source=error --signature=54ac5c40181054136714457 --class=innocent
> 5372: [01/07/2015 23:05:40] pass-thru args: --deliver
> 5372: [01/07/2015 23:05:40] processing user XXXX
> 5372: [01/07/2015 23:05:40] uid = 5000, euid = 5000, gid = 5000, egid = 119
>
> All I dit was editing src/dspam.c line 177 from
> tmp = "--source=error;--signature=%s";
>
> To :
> tmp = "--source=error;--signature=%%s";
>
>     Guillaume Hilt
>
> Le 07/01/2015 13:28, Guillaume a écrit :
>> In dovecot-antispam source dspam.c, there's this line :
>> tmp = "--source=error;--signature=%s";
>>
>> Isn't my issue related to it ? It sure looks like what's added at the
>> end of the input args
>> Shouldn't it be %%s ?
>>
>> When i'm trying to compile dovecot-antispam sources (having added the
>> maybe missing%) I got this error :
>> No rule to make target `aux.c', needed by `depend'
>>
>>      Guillaume Hilt
>>
>> Le 06/01/2015 12:36, Guillaume a écrit :
>>> Same issue as I said :)
>>>
>>> I updated my dovecot antispam_dspam_args parameter to this, hoping
>>> to remove the second signature parameter : --deliver;--user;%u
>>>
>>> But it's still the same issue.
>>>
>>>
>>>       Guillaume Hilt
>>>
>>> Le 06/01/2015 12:25, Tom Hendrikx a écrit :
>>>>> I updated my dovecot antispam_dspam_args parameter to this, hoping
>>>>> to remove the second signature parameter : --deliver;--user;%u
>>>>>
>>>>> But it still the same issue. Maybe this extra signature=%s comes
>>>> >from dovecot-antispam ?
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel Website,
>>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>>> hub for all things parallel software development, from weekly thought
>>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>>> look and join the conversation now. http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Tom Hendrikx
Hi Guillaume,

On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
 > It's better but not fixed.
<snip>
 > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
 > struct for name: XXXXXX
 > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
<snip>
 > SELECT *
 > FROM `dspam_signature_data`
 > WHERE `signature` = '54ac0490181051388914240'
 >
 > uid     signature     data     length     created_on
 > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
 >

The uid in the dspam debug log (16), and the one in the database (143)
are not the same. You are using different accounts for filtering and
retraining.

--
Tom


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Huh ?

6329: [01/07/2015 23:14:38] input args: /usr/bin/dspam --deliver --user
XXXXXX --source=error --signature=54ac0490181051388914240 --class=spam
6329: [01/07/2015 23:14:38] pass-thru args: --deliver

Where do you see a different signature ?

   Guillaume Hilt

Le 08/01/2015 09:57, Tom Hendrikx a écrit :

> Hi Guillaume,
>
> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>   > It's better but not fixed.
> <snip>
>   > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>   > struct for name: XXXXXX
>   > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
> <snip>
>   > SELECT *
>   > FROM `dspam_signature_data`
>   > WHERE `signature` = '54ac0490181051388914240'
>   >
>   > uid     signature     data     length     created_on
>   > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>   >
>
> The uid in the dspam debug log (16), and the one in the database (143)
> are not the same. You are using different accounts for filtering and
> retraining.
>
> --
> Tom
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
uid not signature id, sorry :)

   Guillaume Hilt

Le 08/01/2015 10:19, Guillaume a écrit :

> Huh ?
>
> 6329: [01/07/2015 23:14:38] input args: /usr/bin/dspam --deliver --user
> XXXXXX --source=error --signature=54ac0490181051388914240 --class=spam
> 6329: [01/07/2015 23:14:38] pass-thru args: --deliver
>
> Where do you see a different signature ?
>
>     Guillaume Hilt
>
> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>> Hi Guillaume,
>>
>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>    > It's better but not fixed.
>> <snip>
>>    > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>>    > struct for name: XXXXXX
>>    > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>> <snip>
>>    > SELECT *
>>    > FROM `dspam_signature_data`
>>    > WHERE `signature` = '54ac0490181051388914240'
>>    >
>>    > uid     signature     data     length     created_on
>>    > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>>    >
>>
>> The uid in the dspam debug log (16), and the one in the database (143)
>> are not the same. You are using different accounts for filtering and
>> retraining.
>>
>> --
>> Tom
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
In reply to this post by Tom Hendrikx
Ok, it's because i'm having aliases.
So the spam was sent to [hidden email] but my mailbox address is
[hidden email].

Since I'm the only user of my mail server, how can i do to make it work
with the aliases ?

   Guillaume Hilt

Le 08/01/2015 09:57, Tom Hendrikx a écrit :

> Hi Guillaume,
>
> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>   > It's better but not fixed.
> <snip>
>   > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>   > struct for name: XXXXXX
>   > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
> <snip>
>   > SELECT *
>   > FROM `dspam_signature_data`
>   > WHERE `signature` = '54ac0490181051388914240'
>   >
>   > uid     signature     data     length     created_on
>   > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>   >
>
> The uid in the dspam debug log (16), and the one in the database (143)
> are not the same. You are using different accounts for filtering and
> retraining.
>
> --
> Tom
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Basically i'm using aliases only to receive (and send on a few
exceptions, like the dspam@ i'm using right now).
It helps me to know which website sold my email address (i've got one
alias per website).

So, it would need for DSPAM to only reference one uid and put all the
data under it.
Or it could use "Delivered-To" header instead of "To" field.

I don't know if it's possible.

   Guillaume Hilt

Le 08/01/2015 10:31, Guillaume a écrit :

> Ok, it's because i'm having aliases.
> So the spam was sent to [hidden email] but my mailbox address is
> [hidden email].
>
> Since I'm the only user of my mail server, how can i do to make it work
> with the aliases ?
>
>     Guillaume Hilt
>
> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>> Hi Guillaume,
>>
>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>    > It's better but not fixed.
>> <snip>
>>    > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>>    > struct for name: XXXXXX
>>    > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>> <snip>
>>    > SELECT *
>>    > FROM `dspam_signature_data`
>>    > WHERE `signature` = '54ac0490181051388914240'
>>    >
>>    > uid     signature     data     length     created_on
>>    > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>>    >
>>
>> The uid in the dspam debug log (16), and the one in the database (143)
>> are not the same. You are using different accounts for filtering and
>> retraining.
>>
>> --
>> Tom
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Martin Wheldon
Hi Guillaume,

The way I deal with this is to use a dspam external lookup which maps
all my aliases to my real id.

In your configuration I suspect you will find uids for each of your
aliases in the database meaning that filtering will
differ between aliases, and you suffer the training issue you are
describing.

Hope that helps.

Best Regards

Martin

On 2015-01-08 09:41, Guillaume wrote:

> Basically i'm using aliases only to receive (and send on a few
> exceptions, like the dspam@ i'm using right now).
> It helps me to know which website sold my email address (i've got one
> alias per website).
>
> So, it would need for DSPAM to only reference one uid and put all the
> data under it.
> Or it could use "Delivered-To" header instead of "To" field.
>
> I don't know if it's possible.
>
>    Guillaume Hilt
>
> Le 08/01/2015 10:31, Guillaume a écrit :
>> Ok, it's because i'm having aliases.
>> So the spam was sent to [hidden email] but my mailbox address is
>> [hidden email].
>>
>> Since I'm the only user of my mail server, how can i do to make it
>> work
>> with the aliases ?
>>
>>     Guillaume Hilt
>>
>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>> Hi Guillaume,
>>>
>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>    > It's better but not fixed.
>>> <snip>
>>>    > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful
>>> returning
>>>    > struct for name: XXXXXX
>>>    > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>> <snip>
>>>    > SELECT *
>>>    > FROM `dspam_signature_data`
>>>    > WHERE `signature` = '54ac0490181051388914240'
>>>    >
>>>    > uid     signature     data     length     created_on
>>>    > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968
>>> 2015-01-06
>>>    >
>>>
>>> The uid in the dspam debug log (16), and the one in the database
>>> (143)
>>> are not the same. You are using different accounts for filtering
>>> and
>>> retraining.
>>>
>>> --
>>> Tom
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel
>>> Website,
>>> sponsored by Intel and developed in partnership with Slashdot
>>> Media, is your
>>> hub for all things parallel software development, from weekly
>>> thought
>>> leadership blogs to news, videos, case studies, tutorials and more.
>>> Take a
>>> look and join the conversation now.
>>> http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel
>> Website,
>> sponsored by Intel and developed in partnership with Slashdot Media,
>> is your
>> hub for all things parallel software development, from weekly
>> thought
>> leadership blogs to news, videos, case studies, tutorials and more.
>> Take a
>> look and join the conversation now.
>> http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media,
> is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more.
> Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>
> !DSPAM:31,54ae512678341791841368!


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
Hi Martin,

That would work indeed, but could you please describe your configuration ?
I'm using MySQL (no LDAP) but I can't find a lot of documentation about
this configuration for DSPAM.

Since there's no direct MySQL support and that i would use only one uid,
i suppose a simple script would be enough, but i don't know how the
"program" mode works.

Could i do it simplier and having a mysql update script running to
update every uid in dspam_token_data and dspam_signature_data to the uid
i'm using ?

Thanks,

   Guillaume Hilt

Le 08/01/2015 10:52, Martin Wheldon a écrit :

> Hi Guillaume,
>
> The way I deal with this is to use a dspam external lookup which maps
> all my aliases to my real id.
>
> In your configuration I suspect you will find uids for each of your
> aliases in the database meaning that filtering will
> differ between aliases, and you suffer the training issue you are
> describing.
>
> Hope that helps.
>
> Best Regards
>
> Martin
>
> On 2015-01-08 09:41, Guillaume wrote:
>> Basically i'm using aliases only to receive (and send on a few
>> exceptions, like the dspam@ i'm using right now).
>> It helps me to know which website sold my email address (i've got one
>> alias per website).
>>
>> So, it would need for DSPAM to only reference one uid and put all the
>> data under it.
>> Or it could use "Delivered-To" header instead of "To" field.
>>
>> I don't know if it's possible.
>>
>>     Guillaume Hilt
>>
>> Le 08/01/2015 10:31, Guillaume a écrit :
>>> Ok, it's because i'm having aliases.
>>> So the spam was sent to [hidden email] but my mailbox address is
>>> [hidden email].
>>>
>>> Since I'm the only user of my mail server, how can i do to make it
>>> work
>>> with the aliases ?
>>>
>>>      Guillaume Hilt
>>>
>>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>>> Hi Guillaume,
>>>>
>>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>>     > It's better but not fixed.
>>>> <snip>
>>>>     > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful
>>>> returning
>>>>     > struct for name: XXXXXX
>>>>     > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>>> <snip>
>>>>     > SELECT *
>>>>     > FROM `dspam_signature_data`
>>>>     > WHERE `signature` = '54ac0490181051388914240'
>>>>     >
>>>>     > uid     signature     data     length     created_on
>>>>     > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968
>>>> 2015-01-06
>>>>     >
>>>>
>>>> The uid in the dspam debug log (16), and the one in the database
>>>> (143)
>>>> are not the same. You are using different accounts for filtering
>>>> and
>>>> retraining.
>>>>
>>>> --
>>>> Tom
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Dive into the World of Parallel Programming! The Go Parallel
>>>> Website,
>>>> sponsored by Intel and developed in partnership with Slashdot
>>>> Media, is your
>>>> hub for all things parallel software development, from weekly
>>>> thought
>>>> leadership blogs to news, videos, case studies, tutorials and more.
>>>> Take a
>>>> look and join the conversation now.
>>>> http://goparallel.sourceforge.net
>>>> _______________________________________________
>>>> Dspam-user mailing list
>>>> [hidden email]
>>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel
>>> Website,
>>> sponsored by Intel and developed in partnership with Slashdot Media,
>>> is your
>>> hub for all things parallel software development, from weekly
>>> thought
>>> leadership blogs to news, videos, case studies, tutorials and more.
>>> Take a
>>> look and join the conversation now.
>>> http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media,
>> is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more.
>> Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>> !DSPAM:31,54ae512678341791841368!
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Tom Hendrikx
In reply to this post by Guillaume


On 08-01-15 10:41, Guillaume wrote:
> Basically i'm using aliases only to receive (and send on a few
> exceptions, like the dspam@ i'm using right now).
> It helps me to know which website sold my email address (i've got one
> alias per website).
>
> So, it would need for DSPAM to only reference one uid and put all the
> data under it.
> Or it could use "Delivered-To" header instead of "To" field.

You can make DSPAM put the used uid in the signature, see the config
file for details. The produced signatures look like
'163,sdjkw28d9udjksa9d', where 163 is the uid of the user, and the part
after the comma is the actual sig. The retrain logic is then able to
find out the uid from the sig line, and use it.

Tom

>
> I don't know if it's possible.
>
>     Guillaume Hilt
>
> Le 08/01/2015 10:31, Guillaume a écrit :
>> Ok, it's because i'm having aliases.
>> So the spam was sent to [hidden email] but my mailbox address is
>> [hidden email].
>>
>> Since I'm the only user of my mail server, how can i do to make it work
>> with the aliases ?
>>
>>      Guillaume Hilt
>>
>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>> Hi Guillaume,
>>>
>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>     > It's better but not fixed.
>>> <snip>
>>>     > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>>>     > struct for name: XXXXXX
>>>     > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>> <snip>
>>>     > SELECT *
>>>     > FROM `dspam_signature_data`
>>>     > WHERE `signature` = '54ac0490181051388914240'
>>>     >
>>>     > uid     signature     data     length     created_on
>>>     > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>>>     >
>>>
>>> The uid in the dspam debug log (16), and the one in the database (143)
>>> are not the same. You are using different accounts for filtering and
>>> retraining.
>>>
>>> --
>>> Tom
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel Website,
>>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>>> hub for all things parallel software development, from weekly thought
>>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>>> look and join the conversation now. http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Martin Wheldon
In reply to this post by Guillaume
Hi Guillaume,

No problem, Unfortunately I'm a LDAP user, but I can describe my setup.

ExtLookupQuery          "(|(mail=%u)(gosaMailAlternateAddress=%u))"  #
Can either be an LDAP search filter or an SQL query (TODO)
ExtLookupLDAPAttribute  "mail"                                       #
Attribute to be used when ExtLookupDriver is 'ldap'

So the query is doing a lookup for the recipient address in the
attributes mail and gosaMailAlternativeAddress and will return the
contents of the
mail attribute.

An example from my system for myself.

My account contains the following information:
mail:                     [hidden email]
gosaMailAlternateAddress: [hidden email]

So a message addressed to [hidden email] will mean that
dspam will lookup [hidden email] in the mail attribute and
the gosaMailAlternateAdddress
and return the contents of the mail attribute
[hidden email]

And a message addressed to [hidden email] will mean
that dspam will lookup [hidden email] in the mail
attribute and the gosaMailAlternateAdddress
and return the contents of the mail attribute
[hidden email]

So I would guess that your program script will need to accept a
recipient address on the command line and return a recipient address to
dspam.
I've never had cause to try it but you could test it easily by creating
a script that just returned your email address regardless of what it is
passed
given that you are the only user.

Hope that helps.

Best Regards

Martin

On 2015-01-08 10:29, Guillaume wrote:

> Hi Martin,
>
> That would work indeed, but could you please describe your
> configuration ?
> I'm using MySQL (no LDAP) but I can't find a lot of documentation
> about
> this configuration for DSPAM.
>
> Since there's no direct MySQL support and that i would use only one
> uid,
> i suppose a simple script would be enough, but i don't know how the
> "program" mode works.
>
> Could i do it simplier and having a mysql update script running to
> update every uid in dspam_token_data and dspam_signature_data to the
> uid
> i'm using ?
>
> Thanks,
>
>    Guillaume Hilt
>
> Le 08/01/2015 10:52, Martin Wheldon a écrit :
>> Hi Guillaume,
>>
>> The way I deal with this is to use a dspam external lookup which
>> maps
>> all my aliases to my real id.
>>
>> In your configuration I suspect you will find uids for each of your
>> aliases in the database meaning that filtering will
>> differ between aliases, and you suffer the training issue you are
>> describing.
>>
>> Hope that helps.
>>
>> Best Regards
>>
>> Martin
>>
>> On 2015-01-08 09:41, Guillaume wrote:
>>> Basically i'm using aliases only to receive (and send on a few
>>> exceptions, like the dspam@ i'm using right now).
>>> It helps me to know which website sold my email address (i've got
>>> one
>>> alias per website).
>>>
>>> So, it would need for DSPAM to only reference one uid and put all
>>> the
>>> data under it.
>>> Or it could use "Delivered-To" header instead of "To" field.
>>>
>>> I don't know if it's possible.
>>>
>>>     Guillaume Hilt
>>>
>>> Le 08/01/2015 10:31, Guillaume a écrit :
>>>> Ok, it's because i'm having aliases.
>>>> So the spam was sent to [hidden email] but my mailbox address
>>>> is
>>>> [hidden email].
>>>>
>>>> Since I'm the only user of my mail server, how can i do to make it
>>>> work
>>>> with the aliases ?
>>>>
>>>>      Guillaume Hilt
>>>>
>>>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>>>> Hi Guillaume,
>>>>>
>>>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>>>     > It's better but not fixed.
>>>>> <snip>
>>>>>     > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful
>>>>> returning
>>>>>     > struct for name: XXXXXX
>>>>>     > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>>>> <snip>
>>>>>     > SELECT *
>>>>>     > FROM `dspam_signature_data`
>>>>>     > WHERE `signature` = '54ac0490181051388914240'
>>>>>     >
>>>>>     > uid     signature     data     length     created_on
>>>>>     > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    
>>>>> 3968
>>>>> 2015-01-06
>>>>>     >
>>>>>
>>>>> The uid in the dspam debug log (16), and the one in the database
>>>>> (143)
>>>>> are not the same. You are using different accounts for filtering
>>>>> and
>>>>> retraining.
>>>>>
>>>>> --
>>>>> Tom
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Dive into the World of Parallel Programming! The Go Parallel
>>>>> Website,
>>>>> sponsored by Intel and developed in partnership with Slashdot
>>>>> Media, is your
>>>>> hub for all things parallel software development, from weekly
>>>>> thought
>>>>> leadership blogs to news, videos, case studies, tutorials and
>>>>> more.
>>>>> Take a
>>>>> look and join the conversation now.
>>>>> http://goparallel.sourceforge.net
>>>>> _______________________________________________
>>>>> Dspam-user mailing list
>>>>> [hidden email]
>>>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Dive into the World of Parallel Programming! The Go Parallel
>>>> Website,
>>>> sponsored by Intel and developed in partnership with Slashdot
>>>> Media,
>>>> is your
>>>> hub for all things parallel software development, from weekly
>>>> thought
>>>> leadership blogs to news, videos, case studies, tutorials and
>>>> more.
>>>> Take a
>>>> look and join the conversation now.
>>>> http://goparallel.sourceforge.net
>>>> _______________________________________________
>>>> Dspam-user mailing list
>>>> [hidden email]
>>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel
>>> Website,
>>> sponsored by Intel and developed in partnership with Slashdot
>>> Media,
>>> is your
>>> hub for all things parallel software development, from weekly
>>> thought
>>> leadership blogs to news, videos, case studies, tutorials and more.
>>> Take a
>>> look and join the conversation now.
>>> http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel
>> Website,
>> sponsored by Intel and developed in partnership with Slashdot Media,
>> is your
>> hub for all things parallel software development, from weekly
>> thought
>> leadership blogs to news, videos, case studies, tutorials and more.
>> Take a
>> look and join the conversation now.
>> http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media,
> is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more.
> Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>
> !DSPAM:31,54ae5c3e78347103081423!


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Guillaume
In reply to this post by Tom Hendrikx
This was already set at work on our mail server but not on mine ... How
stupid of me.

Thanks Tom and Martin, everything seems fine now.

I sent an email to Eugene regarding my fix to dovecot-antispam.
This is not the best way to do it but, at least, he will be able to see
the issue.

   Guillaume Hilt

Le 08/01/2015 11:57, Tom Hendrikx a écrit :

>
> On 08-01-15 10:41, Guillaume wrote:
>> Basically i'm using aliases only to receive (and send on a few
>> exceptions, like the dspam@ i'm using right now).
>> It helps me to know which website sold my email address (i've got one
>> alias per website).
>>
>> So, it would need for DSPAM to only reference one uid and put all the
>> data under it.
>> Or it could use "Delivered-To" header instead of "To" field.
> You can make DSPAM put the used uid in the signature, see the config
> file for details. The produced signatures look like
> '163,sdjkw28d9udjksa9d', where 163 is the uid of the user, and the part
> after the comma is the actual sig. The retrain logic is then able to
> find out the uid from the sig line, and use it.
>
> Tom
>
>> I don't know if it's possible.
>>
>>      Guillaume Hilt
>>
>> Le 08/01/2015 10:31, Guillaume a écrit :
>>> Ok, it's because i'm having aliases.
>>> So the spam was sent to [hidden email] but my mailbox address is
>>> [hidden email].
>>>
>>> Since I'm the only user of my mail server, how can i do to make it work
>>> with the aliases ?
>>>
>>>       Guillaume Hilt
>>>
>>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>>> Hi Guillaume,
>>>>
>>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>>      > It's better but not fixed.
>>>> <snip>
>>>>      > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful returning
>>>>      > struct for name: XXXXXX
>>>>      > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>>> <snip>
>>>>      > SELECT *
>>>>      > FROM `dspam_signature_data`
>>>>      > WHERE `signature` = '54ac0490181051388914240'
>>>>      >
>>>>      > uid     signature     data     length     created_on
>>>>      > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968 2015-01-06
>>>>      >
>>>>
>>>> The uid in the dspam debug log (16), and the one in the database (143)
>>>> are not the same. You are using different accounts for filtering and
>>>> retraining.
>>>>
>>>> --
>>>> Tom
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Dive into the World of Parallel Programming! The Go Parallel Website,
>>>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>>>> hub for all things parallel software development, from weekly thought
>>>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>>>> look and join the conversation now. http://goparallel.sourceforge.net
>>>> _______________________________________________
>>>> Dspam-user mailing list
>>>> [hidden email]
>>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel Website,
>>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>>> hub for all things parallel software development, from weekly thought
>>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>>> look and join the conversation now. http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel Website,
>> sponsored by Intel and developed in partnership with Slashdot Media, is your
>> hub for all things parallel software development, from weekly thought
>> leadership blogs to news, videos, case studies, tutorials and more. Take a
>> look and join the conversation now. http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user
Reply | Threaded
Open this post in threaded view
|

Re: [Dspam-user] Signature retrieval for '%s' failed

Martin Wheldon
In reply to this post by Tom Hendrikx
That would be the following option:

# UIDInSignature: MySQL supports the insertion of the user id into the
DSPAM
# signature. This allows you to create one single spam or fp alias
# (pointing to some arbitrary user), and the uid in the signature will
# switch to the correct user. Result: you need only one spam alias

MySQLUIDInSignature     on

Martin



On 2015-01-08 10:57, Tom Hendrikx wrote:

> On 08-01-15 10:41, Guillaume wrote:
>> Basically i'm using aliases only to receive (and send on a few
>> exceptions, like the dspam@ i'm using right now).
>> It helps me to know which website sold my email address (i've got
>> one
>> alias per website).
>>
>> So, it would need for DSPAM to only reference one uid and put all
>> the
>> data under it.
>> Or it could use "Delivered-To" header instead of "To" field.
>
> You can make DSPAM put the used uid in the signature, see the config
> file for details. The produced signatures look like
> '163,sdjkw28d9udjksa9d', where 163 is the uid of the user, and the
> part
> after the comma is the actual sig. The retrain logic is then able to
> find out the uid from the sig line, and use it.
>
> Tom
>
>>
>> I don't know if it's possible.
>>
>>     Guillaume Hilt
>>
>> Le 08/01/2015 10:31, Guillaume a écrit :
>>> Ok, it's because i'm having aliases.
>>> So the spam was sent to [hidden email] but my mailbox address
>>> is
>>> [hidden email].
>>>
>>> Since I'm the only user of my mail server, how can i do to make it
>>> work
>>> with the aliases ?
>>>
>>>      Guillaume Hilt
>>>
>>> Le 08/01/2015 09:57, Tom Hendrikx a écrit :
>>>> Hi Guillaume,
>>>>
>>>> On 07-01-15 23:21, Guillaume wrote:> Mmmh, spoke too fast.
>>>>     > It's better but not fixed.
>>>> <snip>
>>>>     > 6329: [01/07/2015 23:14:38] _mysql_drv_getpwnam: successful
>>>> returning
>>>>     > struct for name: XXXXXX
>>>>     > 6329: [01/07/2015 23:14:38] Loading preferences for uid 16
>>>> <snip>
>>>>     > SELECT *
>>>>     > FROM `dspam_signature_data`
>>>>     > WHERE `signature` = '54ac0490181051388914240'
>>>>     >
>>>>     > uid     signature     data     length     created_on
>>>>     > 143     54ac0490181051388914240     [BLOB - 3,9 Kio]    3968
>>>> 2015-01-06
>>>>     >
>>>>
>>>> The uid in the dspam debug log (16), and the one in the database
>>>> (143)
>>>> are not the same. You are using different accounts for filtering
>>>> and
>>>> retraining.
>>>>
>>>> --
>>>> Tom
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Dive into the World of Parallel Programming! The Go Parallel
>>>> Website,
>>>> sponsored by Intel and developed in partnership with Slashdot
>>>> Media, is your
>>>> hub for all things parallel software development, from weekly
>>>> thought
>>>> leadership blogs to news, videos, case studies, tutorials and
>>>> more. Take a
>>>> look and join the conversation now.
>>>> http://goparallel.sourceforge.net
>>>> _______________________________________________
>>>> Dspam-user mailing list
>>>> [hidden email]
>>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Dive into the World of Parallel Programming! The Go Parallel
>>> Website,
>>> sponsored by Intel and developed in partnership with Slashdot
>>> Media, is your
>>> hub for all things parallel software development, from weekly
>>> thought
>>> leadership blogs to news, videos, case studies, tutorials and more.
>>> Take a
>>> look and join the conversation now.
>>> http://goparallel.sourceforge.net
>>> _______________________________________________
>>> Dspam-user mailing list
>>> [hidden email]
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Dive into the World of Parallel Programming! The Go Parallel
>> Website,
>> sponsored by Intel and developed in partnership with Slashdot Media,
>> is your
>> hub for all things parallel software development, from weekly
>> thought
>> leadership blogs to news, videos, case studies, tutorials and more.
>> Take a
>> look and join the conversation now.
>> http://goparallel.sourceforge.net
>> _______________________________________________
>> Dspam-user mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media,
> is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more.
> Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Dspam-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/dspam-user
>
> !DSPAM:31,54ae62b678344616478322!


------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Dspam-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/dspam-user