MCP rule question
Erick Perez
eperez at COMPUSERVICE.NET
Tue Apr 6 05:25:57 IST 2004
Ok, here is my rule in /etc/MailScanner/mcp/palabras.cf
header MCP_SUBJ_VIAGRA Subject =~ /\bviagra/i
describe MCP_SUBJ_VIAGRA MCP Palabra de SPAM en Asunto
score MCP_SUBJ_VIAGRA 10.0
This was inserted into mailscanner.conf as per documentation
http://www.sng.ecs.soton.ac.uk/mailscanner/install/mcp/
MCP Checks = yes
MCP Required SpamAssassin Score = 1
MCP High SpamAssassin Score = 10
MCP Error Score = 1
MCP Header = X-MailScanner-MCPCheck:
Non MCP Actions = deliver
MCP Actions = store # I changed this from deliver to store
High Scoring MCP Actions = store # I changed this from deliver to
store
Is Definitely MCP = no
Is Definitely Not MCP = no
Definite MCP Is High Scoring = no
Always Include MCP Report = no
Detailed MCP Report = yes
Include Scores In MCP Report = no
Log MCP = yes
MCP Max SpamAssassin Timeouts = 20
MCP Max SpamAssassin Size = 100000
MCP SpamAssassin Timeout = 10
MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf
MCP SpamAssassin User State Dir =
MCP SpamAssassin Local Rules Dir = %mcp-dir%
MCP SpamAssassin Default Rules Dir = %mcp-dir%
MCP SpamAssassin Install Prefix = %mcp-dir%
Recipient MCP Report = %report-dir%/recipient.mcp.report.txt
Sender MCP Report = %report-dir%/sender.mcp.report.txt
However is sent to myself an email with the word Viagra as part of the
subject and this was seen in the logs:
Apr 6 00:18:46 int MailScanner[8837]: MCP Checks: Starting
Apr 6 00:18:47 int MailScanner[8837]: Message i364Ij0b008940 from
64.21.129.66 (eperez at bansoft.net) to visionpanama.com is MCP, MCP-Checker
(puntaje=10, requerido 1, MCP_SUBJ_VIAGRA)
Apr 6 00:18:48 int MailScanner[8837]: Virus and Content Scanning: Starting
So why did it deliver it?
Erick,
More information about the MailScanner
mailing list