Problem with 'forward' spam action

Daniel Bird dbird at SGHMS.AC.UK
Sun Mar 9 19:35:11 GMT 2003


Julian Field wrote:

> Can you try this patch to Exim.pm please?
>
> --- Exim.pm.old Thu Feb  6 17:12:56 2003
> +++ Exim.pm     Sun Mar  9 19:28:25 2003
> @@ -899,6 +899,7 @@
>    my $this = shift;
>    my($message) = @_;
>
> +  $message->{metadata}{numrcpts}--;
>    $message->{metadata}{rcpts} = [];
>    $message->{metadata}{nonrcpts} = {};

Yup, that's fixed it.

thanks Julian, you're a *

Dan



>
> At 19:16 09/03/2003, you wrote:
>
>> A little more info..
>> If I put a forward on "Spam Actions", it works fine.
>>
>> Dan
>>
>> Daniel Bird wrote:
>>
>>> Dear all,
>>> I'm running Rh7.3, MS4.13-3, SA2.60-cvs and Exim. in MailScanner.conf I
>>> have:
>>>
>>> High Scoring Spam Actions = store forward spam at sghms.ac.uk
>>>
>>> I'm seeing the following in my mail.log....
>>>
>>> Mar  9 18:22:20 mailhub1 MailScanner[17291]: Spam Actions: message
>>> 18s5RA-0004t0-00 actions are forward,store,spam at sghms.ac.uk
>>>
>>> but in my exim log I see....
>>>
>>> 2003-03-09 18:22:20 18s5RA-0004t0-00 Format error in spool file
>>> 18s5RA-0004t0-00-H: size=1573
>>>
>>> and the message is not forwarded...
>>>
>>> This is the content of the above file (I've anonymised the original
>>> recipient).....
>>>
>>> 18s5RA-0004t0-00-H
>>> root 0 0
>>> <wasberdll0 at juno.com>
>>> 1047234136 0
>>> -helo_name shark1
>>> -deliver_firsttime
>>> -host_address 217.39.107.177.3176
>>> -received_protocol esmtp
>>> -body_linecount 68
>>> -interface_address 194.82.51.7.25
>>> XX
>>> 2
>>> spam at sghms.ac.uk
>>>
>>> 171P Received: from [217.39.107.177] (helo=shark1)
>>>        by mailhub1.sghms.ac.uk with esmtp (Exim 4.12)
>>>        id 18s5RA-0004t0-00
>>>        for xxx at sghms.ac.uk; Sun, 09 Mar 2003 18:22:16 +0000
>>> 124  Received: from aol.com ([218.88.187.105]) by shark1 with Microsoft
>>> SMTPSVC(5.0.2195.1600);
>>>         Sun, 9 Mar 2003 18:25:45 +0000
>>> 055I Message-ID: <00006e8a0b57$000007c8$00006aa7 at lycos.com>
>>> 024T To: <xxx at sghms.ac.uk>
>>> 042F From: "John Darvis" <wasberdll0 at juno.com>
>>> 054  Subject:****VeryLikelySPAM****  Dow Jones in Trouble?
>>> 038  Date: Sun, 09 Mar 2003 13:26:21 -1700
>>> 018  MIME-Version: 1.0
>>> 047  Content-Type: text/html;
>>>        charset="iso-8859-1"
>>> 044  Content-Transfer-Encoding: quoted-printable
>>> 030R Reply-To: wasberdll0 at juno.com
>>> 033  Return-Path: wasberdll0 at juno.com
>>> 084  X-OriginalArrivalTime: 09 Mar 2003 18:25:47.0928 (UTC)
>>> FILETIME=[4E4AE180:01C2E669]
>>> 037  X-MailScanner-MH1: Found to be clean
>>> 404  X-MailScanner-SpamCheck: spam, SpamAssassin (score=27, required 5,
>>>        BANG_MONEY, BAYES_90, CLICK_BELOW, EXCUSE_14, FREE_TRIAL,
>>> HTML_40_50,
>>>        HTML_FONT_BIG, HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GREEN,
>>>        HTML_FONT_COLOR_UNSAFE, HTML_LINK_CLICK_HERE,
>>> INVALID_DATE_TZ_ABSURD,
>>>        MSGID_OE_SPAM_4ZERO, MSGID_OUTLOOK_TIME, MSGID_SPAMSIGN_ZEROES,
>>>        OFFERS_ETC, RAZOR2_CF_RANGE_91_100, RAZOR2_CHECK,
>>> SEE_FOR_YOURSELF)
>>> 053  X-MailScanner-SpamScore: sssssssssssssssssssssssssss
>>>
>>> This makes me think MS is not forming the header properly, or am I
>>> missing something?
>>>
>>> regards
>>>
>>> Dan
>>>
>>>
>>> --
>>> This message has been scanned for viruses and
>>> dangerous content by MailScanner, and is
>>> believed to be clean.
>>
>>
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>
>
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list