Spam Actions not working correctly?

[Matthew Bowman]

Er, the extract I included from the maillog showed that the rule worked?
AFAIK you don't need the From/To in the spam.actions.conf file

# This file contains instructions for what to do with messages that are
# detected as spam.
# Each line can contain:
# <address> <action>
# where <action> is either 'deliver', 'store' or 'delete'
# and <address> is either a full email address (e.g. user at sub.domain.com)
#                      or a domain name        (e.g. sub.domain.com)
#                      or a wildcard domain    (e.g. *.domain.com)
#                      or the keyword 'default'.

Ruleset:

Spam Action = /usr/local/MailScanner/etc/spam.actions.conf
#Spam Action = deliver

Matthew




                    Mike Kercher
                    <mike at CAMAROSS.NET       To:     MAILSCANNER at JISCMAIL.AC.UK
                    >                        cc:
                    Sent by:                 Subject:     Re: Spam Actions not working correctly?
                    MailScanner
                    mailing list
                    <MAILSCANNER at JISCM
                    AIL.AC.UK>


                    12/02/2002 08:49
                    AM
                    Please respond to
                    MailScanner
                    mailing list






Looks like you are missing the From/To column:

To:     mbowman at udcom.com               delete
To:     *@vbcomm.net            delete

Have your rules EVER worked?  And do you have the path to this ruleset
defined properly in MailScanner.conf?

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Matthew Bowman
Sent: Monday, December 02, 2002 7:36 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Spam Actions not working correctly?


Greetings,

I have a problem with Spam Actions in the sense that it doesn't appear
to work all the time


mbowman at udcom.com   delete
*@vbcomm.net             delete
default                 deliver

I still get {SPAM?) and {VIRUS?} tagged e-mail. I also get the mail for
hostmaster at vbcomm.net.


However, my maillog this morning states that spam.actions is working...

Dec  2 08:29:42 smithers sendmail[6893]: gB2DTgU06893: from
=<postmaster at raq01.vbcomm.net>, size=1404, class=0, nrcpts=1, msgid
=<200212021331.IAA20387 at raq01.vbcomm.net>, proto=ESMTP, daemon=MTA,
relay=climax.vbcomm.net [208.178.120.12] Dec  2 08:29:42 smithers
sendmail[6893]: gB2DTgU06893: to =<mbowman at udcom.com>, delay=00:00:00,
mailer=smtp, pri=31404, stat=queued Dec  2 08:29:50 smithers
mailscanner[5752]: Message gB2DTgU06893 from 208.178.120.12
(raq01.vbcomm.net) is spam according to SpamAssassin (score=5.3,
required 5.2, AWL, HTTP_USERNAME_USED, MAILTO_TO_SPAM_ADDR,
NO_REAL_NAME, SPAM_PHRASE_00_01, WEIRD_PORT, X_AUTH_WARNING) Dec  2
08:29:50 smithers mailscanner[5752]: Deleted spam message gB2DTgU06893
from queue

I don't filter @vbcomm.net (one of our domains through mailscanner?) as
yet. hostmaster at vbcomm.net is an alias that goes to mbowman at udcom.com
and another e-mail addressee. @udcom.com is filtered through
mailscanner.

This is on a RH 7.2 box with mailscanner 3.26-2 and sendmail 8.11.6

Regards,

Matthew K Bowman,
Systems Administrator