MCP and Spam actions

[Kristian Shaw]

Hi,

I've added the 'deliver' action as suggested and this is a sample message
(spam and MCP) that went through:

root at mailscanner:/opt/MailScanner/etc# tail -1000 /var/log/maillog | grep
i28I3oMA023665
Mar  8 18:03:50 mailscanner sendmail[23665]: i28I3oMA023665:
from=<kris at yyy.co.uk>, size=2476, class=0, nrcpts=1,
msgid=<001901c40537$d11fd140$050a960a at lan.yyy.co.uk>, proto=SMTP,
daemon=MTA, relay=gate.xxx.co.uk [xxx.224.167.xxx]
Mar  8 18:03:50 mailscanner sendmail[23665]: i28I3oMA023665:
to=<kshaw at xxx.co.uk>, delay=00:00:00, mailer=relay, pri=32476, stat=queued
Mar  8 18:04:06 mailscanner MailScanner[23683]: Message i28I3oMA023665 from
xxx.224.167.xxx (kris at yyy.co.uk) to xxx.co.uk is MCP, MCP-Checker (score=11,
required 2, BANNED_BODY_BOLL 1.00, BANNED_BODY_FCK1 5.00, BANNED_BODY_VGR1
5.00)
Mar  8 18:04:12 mailscanner MailScanner[23683]: MCP Actions: message
i28I3oMA023665 actions are forward,deliver,swearbox at xxx.co.uk
Mar  8 18:04:18 mailscanner MailScanner[23683]: Message i28I3oMA023665 from
xxx.224.167.xxx (kris at yyy.co.uk) to xxx.co.uk is spam, SpamAssassin
(score=999.142, required 5, BAYES_10 -0.91, GTUBE 1000.00, LG_4C_2V_3C 0.05)
Mar  8 18:05:11 mailscanner MailScanner[23683]: Spam Actions: message
i28I3oMA023665 actions are attachment

The rules in spam.actions were:

FromOrTo:             default                 attachment deliver

and in the main MailScanner.conf for MCP

MCP Actions = deliver forward swearbox at xxx.co.uk
High Scoring MCP Actions = deliver forward swearbox at xxx.co.uk

...and as can be seen in the log the message goes nowhere. It doesn't matter
the ordering of 'attachment deliver' in spam.actions.rules, nor does it when
I just put that action into the main conf file rather than using a ruleset.
Normal non-mcp spam gets wrapped as an attachment and delivered as expected.

Thanks,

Kris.


>You need to have "deliver" as an action of both Spam Actions and MCP
>Actions to get the message to be delivered.
>
>At 13:12 08/03/2004, you wrote:
>>I also have the same Problem. If MCP catch a message and do anything
>>with it, then the message will not be deliver. Every action taken by MCP
>>will stop deliver bei spamassassin.
>>
>>Need Help!!!
>>
>>
>>Daniel Gercke
>>
>>
>>Kristian Shaw schrieb:
>>>Hi,
>>>
>>>
>>>>>Mar  7 16:15:17 mailscanner MailScanner[3722]: Spam Actions: message
>>>>>i27GF70K003708 actions are attachment
>>>>
>>>>If you want it to deliver, you have to ask it to. Use "attachment
>>>>deliver".
>>>>
>>>>
>>>>>Mar  7 16:15:17 mailscanner MailScanner[3722]: Created attachment dirs
>>>>>for
>>>>>0 messages
>>>
>>>
>>>This is the problem though, the rule I've got for spam actions is:
>>>
>>>FromOrTo:             default                 attachment deliver
>>>
>>>yet in the log the 'deliver' action is dropped and so the message
>>>disappears. If I remove 'attachment' from the rule and just leave
>>>'deliver'
>>>then no action appears in the log at all and again the message goes into
>>>a
>>>black hole!
>>>
>>>Mailscanner works fine creating attachments and delivering 'normal' spam,
>>>it's just when messages are also MCP that it is going wrong.
>>>
>>>Kris.
>>>
>>
>>
>>--
>>Diese Nachricht wurde auf Viren und andere gefaerliche Inhalte untersucht
>>und ist - aktuelle Virenscanner vorausgesetzt - sauber.
>>MailScanner dankt transtec fur die freundliche Unterstutzung.
>
>--
>Julian Field
>www.MailScanner.info
>MailScanner thanks transtec Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

_________________________________________________________________
Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo