Enabling DSPAM

[osiris]

What does actually DSPAM do? Is it something I should enable to help prevent spam?

If so, how do I enable it in current versions of zimbra? I followed a guide here on the forum that basicly just said to uncomment $dspam line in /opt/zimbra/conf/amavisd.conf.in and enable the zimbra crontabs for dspam. But when I did that and restarted the services and try to run the dspam bin manually I just get:

cat /var/log/zimbra.log | grep dspam
Feb 29 04:13:18 smtp09 amavis[29596]: No $dspam,             not using it
Feb 29 10:01:28 smtp09 dspam[5127]: No such feature 'chained'
Feb 29 10:01:28 smtp09 dspam[5127]: Unable to determine the destination user
Feb 29 10:01:28 smtp09 dspam[5127]: DSPAM agent misconfigured: aborting
Feb 29 10:02:41 smtp09 dspam[5504]: No such feature 'chained'
Feb 29 10:02:41 smtp09 dspam[5504]: Unable to determine the destination user
Feb 29 10:02:41 smtp09 dspam[5504]: DSPAM agent misconfigured: aborting
Feb 29 10:05:26 smtp09 amavis[6320]: No $dspam,             not using it
Feb 29 10:11:59 smtp09 amavis[12812]: No $dspam,             not using it
Feb 29 10:13:56 smtp09 dspam[13320]: No such feature 'chained'
Feb 29 10:13:56 smtp09 dspam[13320]: Unable to determine the destination user
Feb 29 10:13:56 smtp09 dspam[13320]: DSPAM agent misconfigured: aborting

in /opt/zimbra/conf/amavisd.conf.in I now have:

$dspam = '/opt/zimbra/dspam/bin/dspam';

No new entries with DSPAM mentioned is added to log when reciving e-mails.

Any thaughts?

[osiris]

Nevermind, after the nightly backup and thus restart of all services it now works it seems, even though my zimbra.log is filled with:

Mar 1 04:26:26 smtp09 dspam[30049]: No such feature 'chained'
Mar 1 04:26:31 smtp09 dspam[30057]: No such feature 'chained'
Mar 1 04:44:09 smtp09 dspam[1627]: No such feature 'chained'

Any ideas on why and how to fix? Since its enabled by default in the dspam.conf I guess its probably a good idea to get it sorted..

But things seems to work as they should..

X-DSPAM-Result: Spam
X-DSPAM-Confidence: 0.5306
X-DSPAM-Probability: 0.9916
X-DSPAM-Signature: 47c931273409520942013
X-DSPAM-Factors: 15,
X-Virus-Scanned: amavisd-new at 
X-Spam-Flag: YES
X-Spam-Score: 8.758
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.758 tagged_above=-10 required=5
	tests=[BAYES_50=0.001, DRUGS_STOCK_MIMEOLE=2, DSPAM_SPAM=1.5,
	MID_DEGREES=3.7, RCVD_IN_BL_SPAMCOP_NET=1.558, SPF_PASS=-0.001]

[osiris]

Hmm, after enabling DSPAM, mails are not forwarded to spam and ham training accounts anymore. Before when I tested I could mark a mail as spam, and then go to the spam training account and see the mail in the inbox, manually run /opt/zimbra/bin/zmtrainsa and it would say learning tokens for x amount of messages etc. Enabled dspam yesterday and now it seems like even if I mark a mail as junk or not junk, nothing more happends really..

[mmorse]

I haven't played with DSPAM in a while, but examine your /opt/zimbra/bin/zmtrainsa and see if you need to replace:

   for f in ${spamdir}/*; do
      test -f ${f} && ${zimbra_home}/dspam/bin/dspam_corpus --addspam zimbra ${f}
    done
    for f in ${hamdir}/*; do
      test -f ${f} && ${zimbra_home}/dspam/bin/dspam_corpus zimbra ${f}
    done

With:

 ${zimbra_home}/dspam/bin/dspam_train zimbra ${spamdir} ${hamdir}

---

Edit, 5.0.11+ we now use an zmlocalconfig attribute:

 if [ x"$amavis_dspam_enabled" = "xtrue" ]; then
    timestampit  "Starting dspam $MODE training for $USER using folder $FOLDER"
    if [ $MODE == "ham" ]; then
        MODE="innocent"
    fi

    ${zimbra_home}/dspam/bin/dspam --user zimbra --class=${MODE} --source=corpus --mode=teft \
      --feature=chained,noise --stdout

    ${zimbra_home}/dspam/bin/dspam_clean -p0 $USER
    timestampit  "Finished dspam $MODE training for $USER using folder $FOLDER"
  fi

    /bin/rm -rf ${tempdir}

}

[osiris]

Yeah, it was confed as your first lines so I changed that to the 1 line you pasted. But still, it seems like what I experience now is an issue before this.. As mentioned before when I hit the Junk button for a mail I could right away see that mail in the systems spam train accounts inbox, also could see the movement of the mail from user -> spamtrianing account in zimbra.log, now that doesnt happend anymore.. Tried now also just to mark an e-mail as spam, and then run the /opt/zimbra/bin/zmtrainsa, doesnt check any new mails as I have seen before

20080301224111 Starting spam/ham extraction from system accounts.
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20080301224115 Finished extracting spam/ham from system accounts.
20080301224115 Starting spamassassin training.
netset: cannot include 127.0.0.0/8 as it has already been included
Learned tokens from 0 message(s) (0 message(s) examined)
netset: cannot include 127.0.0.0/8 as it has already been included
Learned tokens from 0 message(s) (0 message(s) examined)
netset: cannot include 127.0.0.0/8 as it has already been included
20080301224135 Finished spamassassin training.

[jholder]

Can you file a bug on this? I vaguely recall this issue cropping up in the past, but I thought we fixed it. It might have re-emerged.

[wfweaver]

Even though I followed the steps described here, dspam was NOT running! When I tried to run it, I got a permission denied. It seems that dspam was owned by root:root and needed to be owned by zimbra;zimbra before it would actually work!

Also, has ANYONE found the answer to the whole "No Such feature 'chained'" message in the log? What is that about and how do you fix it or get rid of it?

[osiris]

Does your spam/ham training work after enabling DSPAM?

[phoenix]

Originally Posted by wfweaver

Even though I followed the steps described here, dspam was NOT running! When I tried to run it, I got a permission denied. It seems that dspam was owned by root:root and needed to be owned by zimbra;zimbra before it would actually work!

If you've ever run zmfixperms on your system it will set the incorrect ownership for the DSPAM directories.

Originally Posted by wfweaver

Also, has ANYONE found the answer to the whole "No Such feature 'chained'" message in the log? What is that about and how do you fix it or get rid of it?

A search of the DSPAM mailing list would have found the answer for you.

You should search our bugzilla for both of the above problems, the answer to those problems is there and you should also vote on either or both of those bug reports.

[phoenix]

Originally Posted by osiris

Does your spam/ham training work after enabling DSPAM?

Yes, it does.