dspam settings

[ronsterchan]

Hello

I have dspam switched on but some messages marked as spam is still coming through, are there other settings I need to make? For example this is in the header of one of the spam messages that still came through.

X-DSPAM-Result: Spam
X-DSPAM-Confidence: 0.7016
X-DSPAM-Probability: 1.0000

Thanks
Ron

[jholder]

Hi Ron,
May I ask how you enabled it?

[ronsterchan]

uncomment this line

#$dspam = '/opt/zimbra/dspam/bin/dspam';

in amavisd.conf

[jholder]

Yeah, I don't know. We don't use DSPAM anymore, so it might be that it's just becoming abandonware.

[Krishopper]

uncomment this line

#$dspam = '/opt/zimbra/dspam/bin/dspam';

in amavisd.conf

Uncomment it in amavisd.conf.in, as amavisd.conf gets re-written every time Zimbra is stop/started.

Check your spam score in the headers. Spam classification is not entirely based on dspam, as SpamAssassin scores are considered.

For example:

X-Spam-Status: Yes, score=14.823 tagged_above=-10 required=6.6
tests=[BAYES_50=0.001, DSPAM_SPAM=4.5, HTML_IMAGE_ONLY_20=1.546,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96,
RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033,
TVD_FW_GRAPHIC_NAME_MID=0.543]

I bumped my DSPAM_SPAM score up to 4.5 from the default of 1.5 and found things to work a lot better (within salocal.conf.in).

[jholder]

Nice catch Kris!

[Krishopper]

Well, on this note *sigh* I upgraded from 4.5.8 to 4.5.10 last night and now dspam is not running for me, either.

Uncommented it in amavisd.conf.in, restarted Zimbra, and it's uncommented in amavisd.conf

So I don't know? dspam is one of the things that helps my spam filtering a ton, and Zimbra won't let me use it.

[Krishopper]

Looks like dspam still requires a "chown -R zimbra:zimbra dspam-3.6.2" after install.

That got mine working again.

[maerten]

I thinks that since version 4.5.10, you must make dspam readable and executable as root:
chmod a+rx /opt/zimbra/dspam/bin/dspam

[maerten]

The above solution doesn't work, you really have to change the ownership like "Krishopper" said.