Problem with 'forward' spam action

Julian Field mailscanner at ecs.soton.ac.uk
Sun Mar 9 19:28:18 GMT 2003


Can you try this patch to Exim.pm please?

--- Exim.pm.old Thu Feb  6 17:12:56 2003
+++ Exim.pm     Sun Mar  9 19:28:25 2003
@@ -899,6 +899,7 @@
    my $this = shift;
    my($message) = @_;

+  $message->{metadata}{numrcpts}--;
    $message->{metadata}{rcpts} = [];
    $message->{metadata}{nonrcpts} = {};

At 19:16 09/03/2003, you wrote:
>A little more info..
>If I put a forward on "Spam Actions", it works fine.
>
>Dan
>
>Daniel Bird wrote:
>
>>Dear all,
>>I'm running Rh7.3, MS4.13-3, SA2.60-cvs and Exim. in MailScanner.conf I
>>have:
>>
>>High Scoring Spam Actions = store forward spam at sghms.ac.uk
>>
>>I'm seeing the following in my mail.log....
>>
>>Mar  9 18:22:20 mailhub1 MailScanner[17291]: Spam Actions: message
>>18s5RA-0004t0-00 actions are forward,store,spam at sghms.ac.uk
>>
>>but in my exim log I see....
>>
>>2003-03-09 18:22:20 18s5RA-0004t0-00 Format error in spool file
>>18s5RA-0004t0-00-H: size=1573
>>
>>and the message is not forwarded...
>>
>>This is the content of the above file (I've anonymised the original
>>recipient).....
>>
>>18s5RA-0004t0-00-H
>>root 0 0
>><wasberdll0 at juno.com>
>>1047234136 0
>>-helo_name shark1
>>-deliver_firsttime
>>-host_address 217.39.107.177.3176
>>-received_protocol esmtp
>>-body_linecount 68
>>-interface_address 194.82.51.7.25
>>XX
>>2
>>spam at sghms.ac.uk
>>
>>171P Received: from [217.39.107.177] (helo=shark1)
>>        by mailhub1.sghms.ac.uk with esmtp (Exim 4.12)
>>        id 18s5RA-0004t0-00
>>        for xxx at sghms.ac.uk; Sun, 09 Mar 2003 18:22:16 +0000
>>124  Received: from aol.com ([218.88.187.105]) by shark1 with Microsoft
>>SMTPSVC(5.0.2195.1600);
>>         Sun, 9 Mar 2003 18:25:45 +0000
>>055I Message-ID: <00006e8a0b57$000007c8$00006aa7 at lycos.com>
>>024T To: <xxx at sghms.ac.uk>
>>042F From: "John Darvis" <wasberdll0 at juno.com>
>>054  Subject:****VeryLikelySPAM****  Dow Jones in Trouble?
>>038  Date: Sun, 09 Mar 2003 13:26:21 -1700
>>018  MIME-Version: 1.0
>>047  Content-Type: text/html;
>>        charset="iso-8859-1"
>>044  Content-Transfer-Encoding: quoted-printable
>>030R Reply-To: wasberdll0 at juno.com
>>033  Return-Path: wasberdll0 at juno.com
>>084  X-OriginalArrivalTime: 09 Mar 2003 18:25:47.0928 (UTC)
>>FILETIME=[4E4AE180:01C2E669]
>>037  X-MailScanner-MH1: Found to be clean
>>404  X-MailScanner-SpamCheck: spam, SpamAssassin (score=27, required 5,
>>        BANG_MONEY, BAYES_90, CLICK_BELOW, EXCUSE_14, FREE_TRIAL,
>>HTML_40_50,
>>        HTML_FONT_BIG, HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GREEN,
>>        HTML_FONT_COLOR_UNSAFE, HTML_LINK_CLICK_HERE,
>>INVALID_DATE_TZ_ABSURD,
>>        MSGID_OE_SPAM_4ZERO, MSGID_OUTLOOK_TIME, MSGID_SPAMSIGN_ZEROES,
>>        OFFERS_ETC, RAZOR2_CF_RANGE_91_100, RAZOR2_CHECK,
>>SEE_FOR_YOURSELF)
>>053  X-MailScanner-SpamScore: sssssssssssssssssssssssssss
>>
>>This makes me think MS is not forming the header properly, or am I
>>missing something?
>>
>>regards
>>
>>Dan
>>
>>
>>--
>>This message has been scanned for viruses and
>>dangerous content by MailScanner, and is
>>believed to be clean.
>
>
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list