config issue?

[Antony Stone]

On Monday 25 August 2003 11:39 pm, Rob Livermore wrote:

> Blahhhhh - I can't get messages marked as {SPAM} to be deleted.  The
> messages are getting "tagged" correctly but are still delivering to the
> mailbox.

Did you change "Spam Action = delete" to "Spam Actions = delete" (extra 's')?

Did you restart MailScanner after making this change?

> Looking at the client side I can see the emails are going through the mail
> filter.  From the server side (maillog) here's what I see.
>
> Aug 25 15:25:21 malachi sendmail[5916]: h7PMPDc05916:
> from=<bounce-mcpa-10848231
> @bc07.standardservices.com>, size=10786, class=0, nrcpts=1,
> msgid=<LISTMANAGERSQ
> L-10848231-68304-2003.08.25-16.26.23--rlivermore#transwesttel.com at bc07.stan
>d ards
> ervice, proto=SMTP, daemon=MTA, relay=bc07.standardservices.com
> [66.37.227.177]
> Aug 25 15:25:21 malachi sendmail[5916]: h7PMPDc05916:
> to=<rlivermore at transwestte
> l.com>, delay=00:00:06, mailer=esmtp, pri=40786, stat=queued
> Aug 25 15:25:22 malachi MailScanner[5843]: Uninfected: Delivered 1 messages
> Aug 25 15:25:22 malachi sendmail[5922]: h7PMPDc05916:
> to=<rlivermore at transwestte
> l.com>, delay=00:00:07, xdelay=00:00:00, mailer=esmtp, pri=130786,
> relay=mail.tr
> answesttel.com. [207.218.8.8], dsn=2.0.0, stat=Sent (OK)
>
> Any ideas?

This log excerpt doesn't even show that the mail is getting identified as
spam, let alone show what MailScanner wants to do with it.

You should be seeing lines like:

New Batch: Scanning 1 messages, xxxx bytes
Spam Checks: Starting
Message abcdefgh from 12.34.56.78 (me at mydomain.com) to you at yourdomain.com is
spam, SpamAssassim (score=14.4, required 5, lots and lots of SpamAssassin
test names.....)
Spam Checks: Found 1 spam messages
Spam Actions: message abcdefgh actions are delete
Virus and Content Scanning: Starting

The important line is second from the end, saying "Spam Actions" - we want to
know what MailScanner thought it was supposed to do with this message, and
make sure it matches what you want it to do with the message.

Feed it a bit more spam and see if you can find something like this in the
syslog output.

Regards,

Antony.


--

Most people have more than the average number of legs.