DSPAM on Kolab

[xehqter]

I had an issue where by syncing the spam folder would take an unreasonably long time. In the background Toltec was pulling the same messages on each sync but never parsing them. It turned out that those messages had malformed headers which didn’t follow RFC standards.  Ie: using LF instead of CRLF, missing whitespace, etc.

To quote Toltec.
The MIME parser is correct in rejecting the mail as illegal. The problem however is that Toltec keeps downloading them. Believe it or not, this is by design. When messages are corrupted during transport the connector will reject them and then try again on the next synchronization.

The simplest solution for me was to purge all spam older then 30 days, that way the amount of malformed spam would be kept at a minimum. Perhaps there is a postfix content filter that would parse the message and reject or modify malformed ones.

Unfortunately dspam’s standalone hash driver does not support merged/global groups so without mysql your suck using standalone signature databases.  You can mimic global/merged in standalone by using dspam_merge to merge an existing global and individual signature database however it is a slow process (doesn’t scale well) and a bit redundant since each user gets a stale copy of the global database vs having one database that is referenced when needed.

Global groups allow you to have a single global signature database for all users providing out of the box protection while each user builds up their own individual signature database.  I recommend downloading the dspam source and reading the README & Doc’s, they have a plethora of information regarding configuration.

I agree amavisd-new support would be great but no virtual user support is a show stopper, unless you want all signatures dumped into one account.

[notHerbert]

I would like to try the Gentoo - dspam - Installation from the wiki, but...

wget http://www.aplusperfect.com/dspam/templates.tar.gz
--2008-08-06 22:02:57--  http://www.aplusperfect.com/dspam/templates.tar.gz
Resolving www.aplusperfect.com... 24.44.103.126
Connecting to www.aplusperfect.com|24.44.103.126|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2008-08-06 22:02:59 ERROR 404: Not Found.

I assume there are amavisd.conf mods in there....   Any suggestions?

[xehqter]

yeah, i know that how-to makes no sense what so ever, its me copy and pasting commands / ideas while implementing it on customers systems.. I've been tied up with other projects for my company, when i get a moment I'll rewrite it. DSpam works fairly well with kolab.  Personally I rarely if ever get spam, one of my clients gets ~4,000 to 6,000 spam messages a day. Only ~20 spam messages a day get through, If the toltec connector worked properly I'm sure it would be 0.  I'm hoping v2.3.1 fixes the issues their having.