Problem with 'forward' spam action

Daniel Bird dbird at SGHMS.AC.UK
Sun Mar 9 19:16:34 GMT 2003


A little more info..
If I put a forward on "Spam Actions", it works fine.

Dan

Daniel Bird wrote:

> Dear all,
> I'm running Rh7.3, MS4.13-3, SA2.60-cvs and Exim. in MailScanner.conf I
> have:
>
> High Scoring Spam Actions = store forward spam at sghms.ac.uk
>
> I'm seeing the following in my mail.log....
>
> Mar  9 18:22:20 mailhub1 MailScanner[17291]: Spam Actions: message
> 18s5RA-0004t0-00 actions are forward,store,spam at sghms.ac.uk
>
> but in my exim log I see....
>
> 2003-03-09 18:22:20 18s5RA-0004t0-00 Format error in spool file
> 18s5RA-0004t0-00-H: size=1573
>
> and the message is not forwarded...
>
> This is the content of the above file (I've anonymised the original
> recipient).....
>
> 18s5RA-0004t0-00-H
> root 0 0
> <wasberdll0 at juno.com>
> 1047234136 0
> -helo_name shark1
> -deliver_firsttime
> -host_address 217.39.107.177.3176
> -received_protocol esmtp
> -body_linecount 68
> -interface_address 194.82.51.7.25
> XX
> 2
> spam at sghms.ac.uk
>
> 171P Received: from [217.39.107.177] (helo=shark1)
>        by mailhub1.sghms.ac.uk with esmtp (Exim 4.12)
>        id 18s5RA-0004t0-00
>        for xxx at sghms.ac.uk; Sun, 09 Mar 2003 18:22:16 +0000
> 124  Received: from aol.com ([218.88.187.105]) by shark1 with Microsoft
> SMTPSVC(5.0.2195.1600);
>         Sun, 9 Mar 2003 18:25:45 +0000
> 055I Message-ID: <00006e8a0b57$000007c8$00006aa7 at lycos.com>
> 024T To: <xxx at sghms.ac.uk>
> 042F From: "John Darvis" <wasberdll0 at juno.com>
> 054  Subject:****VeryLikelySPAM****  Dow Jones in Trouble?
> 038  Date: Sun, 09 Mar 2003 13:26:21 -1700
> 018  MIME-Version: 1.0
> 047  Content-Type: text/html;
>        charset="iso-8859-1"
> 044  Content-Transfer-Encoding: quoted-printable
> 030R Reply-To: wasberdll0 at juno.com
> 033  Return-Path: wasberdll0 at juno.com
> 084  X-OriginalArrivalTime: 09 Mar 2003 18:25:47.0928 (UTC)
> FILETIME=[4E4AE180:01C2E669]
> 037  X-MailScanner-MH1: Found to be clean
> 404  X-MailScanner-SpamCheck: spam, SpamAssassin (score=27, required 5,
>        BANG_MONEY, BAYES_90, CLICK_BELOW, EXCUSE_14, FREE_TRIAL,
> HTML_40_50,
>        HTML_FONT_BIG, HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GREEN,
>        HTML_FONT_COLOR_UNSAFE, HTML_LINK_CLICK_HERE,
> INVALID_DATE_TZ_ABSURD,
>        MSGID_OE_SPAM_4ZERO, MSGID_OUTLOOK_TIME, MSGID_SPAMSIGN_ZEROES,
>        OFFERS_ETC, RAZOR2_CF_RANGE_91_100, RAZOR2_CHECK,
> SEE_FOR_YOURSELF)
> 053  X-MailScanner-SpamScore: sssssssssssssssssssssssssss
>
> This makes me think MS is not forming the header properly, or am I
> missing something?
>
> regards
>
> Dan
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list