What's MailScanner doing after it id's spam?

Aaron Seelye aseelye-lists at ELTOPIA.COM
Mon Oct 13 23:04:09 IST 2003


Hello,

I'm running MailScanner 4.24-5 with SpamAssassin 2.60 with perl 5.61, and in
my maillog file I keep getting entries similar to the following:

Oct 13 14:58:35 filtergate2 MailScanner[75380]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Oct 13 14:58:36 filtergate2 MailScanner[75380]: SophosSAVI 3.74 (engine
2.17) recognizing 85009 viruses
Oct 13 14:58:36 filtergate2 MailScanner[75380]: SophosSAVI using 20 IDE
files
Oct 13 14:58:37 filtergate2 MailScanner[75380]: Using locktype = flock
Oct 13 14:58:37 filtergate2 MailScanner[75380]: New Batch: Found 11974
messages waiting
Oct 13 14:58:37 filtergate2 MailScanner[75380]: New Batch: Scanning 50
messages, 263017 bytes
Oct 13 14:59:13 filtergate2 MailScanner[75380]: Spam Checks: Found 40 spam
messages
Oct 13 15:00:02 filtergate2 MailScanner[75380]: Virus and Content Scanning:
Starting
Oct 13 15:00:04 filtergate2 MailScanner[75380]: Uninfected: Delivered 50
messages
Oct 13 15:00:06 filtergate2 MailScanner[75380]: New Batch: Found 11972
messages waiting
Oct 13 15:00:06 filtergate2 MailScanner[75380]: New Batch: Scanning 50
messages, 1147464 bytes
Oct 13 15:01:20 filtergate2 MailScanner[75380]: Spam Checks: Found 46 spam
messages
Oct 13 15:02:24 filtergate2 MailScanner[75380]: Virus and Content Scanning:
Starting
Oct 13 15:02:26 filtergate2 MailScanner[75380]: Content Checks: Detected
HTML-specific exploits in h9DFV5DA001051
Oct 13 15:02:26 filtergate2 MailScanner[75380]: Content Checks: Found 1
problems
Oct 13 15:02:26 filtergate2 MailScanner[75380]: Content Checks: Detected and
will convert HTML message to plain text in h9DFV5DA001051
Oct 13 15:02:26 filtergate2 MailScanner[75380]: Uninfected: Delivered 50
messages
Oct 13 15:02:26 filtergate2 MailScanner[75380]: New Batch: Found 11823
messages waiting
Oct 13 15:02:26 filtergate2 MailScanner[75380]: New Batch: Scanning 50
messages, 726218 bytes


If you will look after each line stating "Spam Checks: Found XX spam
messages" there is a 45-60 second wait on average before the virus scanner
is invoked.  What's going on here, or how can I find out what's happening
(putting Debug = yes) in the MailScanner.conf yielded no additional
information.

TIA,

Aaron Seelye



More information about the MailScanner mailing list