Problem with 'forward' spam action

[Daniel Bird]

Dear all,
I'm running Rh7.3, MS4.13-3, SA2.60-cvs and Exim. in MailScanner.conf I
have:

High Scoring Spam Actions = store forward spam at sghms.ac.uk

I'm seeing the following in my mail.log....

Mar  9 18:22:20 mailhub1 MailScanner[17291]: Spam Actions: message
18s5RA-0004t0-00 actions are forward,store,spam at sghms.ac.uk

but in my exim log I see....

2003-03-09 18:22:20 18s5RA-0004t0-00 Format error in spool file
18s5RA-0004t0-00-H: size=1573

and the message is not forwarded...

This is the content of the above file (I've anonymised the original
recipient).....

18s5RA-0004t0-00-H
root 0 0
<wasberdll0 at juno.com>
1047234136 0
-helo_name shark1
-deliver_firsttime
-host_address 217.39.107.177.3176
-received_protocol esmtp
-body_linecount 68
-interface_address 194.82.51.7.25
XX
2
spam at sghms.ac.uk

171P Received: from [217.39.107.177] (helo=shark1)
        by mailhub1.sghms.ac.uk with esmtp (Exim 4.12)
        id 18s5RA-0004t0-00
        for xxx at sghms.ac.uk; Sun, 09 Mar 2003 18:22:16 +0000
124  Received: from aol.com ([218.88.187.105]) by shark1 with Microsoft
SMTPSVC(5.0.2195.1600);
         Sun, 9 Mar 2003 18:25:45 +0000
055I Message-ID: <00006e8a0b57$000007c8$00006aa7 at lycos.com>
024T To: <xxx at sghms.ac.uk>
042F From: "John Darvis" <wasberdll0 at juno.com>
054  Subject:****VeryLikelySPAM****  Dow Jones in Trouble?
038  Date: Sun, 09 Mar 2003 13:26:21 -1700
018  MIME-Version: 1.0
047  Content-Type: text/html;
        charset="iso-8859-1"
044  Content-Transfer-Encoding: quoted-printable
030R Reply-To: wasberdll0 at juno.com
033  Return-Path: wasberdll0 at juno.com
084  X-OriginalArrivalTime: 09 Mar 2003 18:25:47.0928 (UTC)
FILETIME=[4E4AE180:01C2E669]
037  X-MailScanner-MH1: Found to be clean
404  X-MailScanner-SpamCheck: spam, SpamAssassin (score=27, required 5,
        BANG_MONEY, BAYES_90, CLICK_BELOW, EXCUSE_14, FREE_TRIAL,
HTML_40_50,
        HTML_FONT_BIG, HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GREEN,
        HTML_FONT_COLOR_UNSAFE, HTML_LINK_CLICK_HERE,
INVALID_DATE_TZ_ABSURD,
        MSGID_OE_SPAM_4ZERO, MSGID_OUTLOOK_TIME, MSGID_SPAMSIGN_ZEROES,
        OFFERS_ETC, RAZOR2_CF_RANGE_91_100, RAZOR2_CHECK, SEE_FOR_YOURSELF)
053  X-MailScanner-SpamScore: sssssssssssssssssssssssssss

This makes me think MS is not forming the header properly, or am I
missing something?

regards

Dan


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.