(Fwd) subject not modified (sometimes)

[Mariano Absatz]

Hi... it seems the list ate my message... it seems it was too long (or too
spamish) with all the spam message attached.

Now I uploaded everything to http://baby.com.ar/MailScanner/msg-20040429/ so
you can see it and the message is lighter.

Please, read on.

------- Forwarded message follows -------
From:           Mariano Absatz <mailscanner at lists.com.ar>
To:             MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
Subject:        subject not modified (sometimes)
Date:           Thu, 29 Apr 2004 11:38:27 -0300

Hi,

I'm using MailScanner 4.29.7 + SpamAssassin 2.63 + ZMailer 2.99.56 with
linux (redhat 6.1).

It is working nicely, but sometimes, and only sometimes, it refuses to
modify the subject.

That is, the message is correctly identified as spam by SpamAssassin, the
X-*-MailScanner*: headers are added, but the subject is NOT prepended with
the {spam} string.

The settings _DO_ set this string for all messages, no rulesets here.

This happens in a very small percentage of messages, but I don't know why.

I suspected of strange MIME encodings in the subject:
=?windows-1252?Q?Ten=E9s_DVD?_Entonces_arm=E1_tu_propia_colecci=F3n!!!?=

but it's not only that, 'cause I saw this happening in messages whose
subject is not MIME encoded...

An example of this is at
http://baby.com.ar/MailScanner/msg-20040429/message1.msg
and the corresponding log is
http://baby.com.ar/MailScanner/msg-20040429/message1.log

The other 4 messages (I don't have the corresponding logs) are hi-scoring
spam that didn't get their subject modified.

They're not MIME encoded BUT I just noticed all of them have To: (and
eventually Cc:) header(s) that don't have actual addresses in them.

To:     MAIL3

To:     unlisted-recipients:; (no To-header on input)
Cc:     113

To:     unlisted-recipients:; (no To-header on input)
Cc:     \ok112.OK, \ok113.OK, \ok114.OK, \ok115.OK, \ok116.OK, \ok117.OK,
\ok118.OK, \ok119.OK, \ok120.OK, \ok121.OK, \ok122.OK, \ok123.OK

Might this be two different problems?


Attachments:
  C:\DOCUME~1\baby\LOCALS~1\Temp\WPM$0A70.PM$
  C:\DOCUME~1\baby\LOCALS~1\Temp\WPM$6A9A.PM$
  C:\DOCUME~1\baby\LOCALS~1\Temp\WPM$3976.PM$
  C:\DOCUME~1\baby\LOCALS~1\Temp\WPM$662A.PM$
------- End of forwarded message -------

--
Mariano Absatz
El Baby
----------------------------------------------------------
Unix is very simple, but it takes a genius to understand the simplicity.
                     -- Dennis Ritchie

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html