MCP and Spam actions

[Daniel Gercke]

i can say the same ...

i´ve tried every combination of actions. ever the same result -- deliver 
action is not used or cleaned by spamassassin if mcp gives score.

notify store etc works fine

Kristian Shaw schrieb:
> Hi,
> 
> I've added the 'deliver' action as suggested and this is a sample message
> (spam and MCP) that went through:
> 
> root at mailscanner:/opt/MailScanner/etc# tail -1000 /var/log/maillog | grep
> i28I3oMA023665
> Mar  8 18:03:50 mailscanner sendmail[23665]: i28I3oMA023665:
> from=<kris at yyy.co.uk>, size=2476, class=0, nrcpts=1,
> msgid=<001901c40537$d11fd140$050a960a at lan.yyy.co.uk>, proto=SMTP,
> daemon=MTA, relay=gate.xxx.co.uk [xxx.224.167.xxx]
> Mar  8 18:03:50 mailscanner sendmail[23665]: i28I3oMA023665:
> to=<kshaw at xxx.co.uk>, delay=00:00:00, mailer=relay, pri=32476, stat=queued
> Mar  8 18:04:06 mailscanner MailScanner[23683]: Message i28I3oMA023665 from
> xxx.224.167.xxx (kris at yyy.co.uk) to xxx.co.uk is MCP, MCP-Checker 
> (score=11,
> required 2, BANNED_BODY_BOLL 1.00, BANNED_BODY_FCK1 5.00, BANNED_BODY_VGR1
> 5.00)
> Mar  8 18:04:12 mailscanner MailScanner[23683]: MCP Actions: message
> i28I3oMA023665 actions are forward,deliver,swearbox at xxx.co.uk
> Mar  8 18:04:18 mailscanner MailScanner[23683]: Message i28I3oMA023665 from
> xxx.224.167.xxx (kris at yyy.co.uk) to xxx.co.uk is spam, SpamAssassin
> (score=999.142, required 5, BAYES_10 -0.91, GTUBE 1000.00, LG_4C_2V_3C 
> 0.05)
> Mar  8 18:05:11 mailscanner MailScanner[23683]: Spam Actions: message
> i28I3oMA023665 actions are attachment
> 
> The rules in spam.actions were:
> 
> FromOrTo:             default                 attachment deliver
> 
> and in the main MailScanner.conf for MCP
> 
> MCP Actions = deliver forward swearbox at xxx.co.uk
> High Scoring MCP Actions = deliver forward swearbox at xxx.co.uk
> 
> ...and as can be seen in the log the message goes nowhere. It doesn't 
> matter
> the ordering of 'attachment deliver' in spam.actions.rules, nor does it 
> when
> I just put that action into the main conf file rather than using a ruleset.
> Normal non-mcp spam gets wrapped as an attachment and delivered as 
> expected.
> 
> Thanks,
> 
> Kris.
> 
> 
>> You need to have "deliver" as an action of both Spam Actions and MCP
>> Actions to get the message to be delivered.
>>
>> At 13:12 08/03/2004, you wrote:
>>
>>> I also have the same Problem. If MCP catch a message and do anything
>>> with it, then the message will not be deliver. Every action taken by MCP
>>> will stop deliver bei spamassassin.
>>>
>>> Need Help!!!
>>>
>>>
>>> Daniel Gercke
>>>
>>>
>>> Kristian Shaw schrieb:
>>>
>>>> Hi,
>>>>
>>>>
>>>>>> Mar  7 16:15:17 mailscanner MailScanner[3722]: Spam Actions: message
>>>>>> i27GF70K003708 actions are attachment
>>>>>
>>>>>
>>>>> If you want it to deliver, you have to ask it to. Use "attachment
>>>>> deliver".
>>>>>
>>>>>
>>>>>> Mar  7 16:15:17 mailscanner MailScanner[3722]: Created attachment 
>>>>>> dirs
>>>>>> for
>>>>>> 0 messages
>>>>
>>>>
>>>>
>>>> This is the problem though, the rule I've got for spam actions is:
>>>>
>>>> FromOrTo:             default                 attachment deliver
>>>>
>>>> yet in the log the 'deliver' action is dropped and so the message
>>>> disappears. If I remove 'attachment' from the rule and just leave
>>>> 'deliver'
>>>> then no action appears in the log at all and again the message goes 
>>>> into
>>>> a
>>>> black hole!
>>>>
>>>> Mailscanner works fine creating attachments and delivering 'normal' 
>>>> spam,
>>>> it's just when messages are also MCP that it is going wrong.
>>>>
>>>> Kris.
>>>>
>>>
>>>
>>> -- 
>>> Diese Nachricht wurde auf Viren und andere gefaerliche Inhalte 
>>> untersucht
>>> und ist - aktuelle Virenscanner vorausgesetzt - sauber.
>>> MailScanner dankt transtec fur die freundliche Unterstutzung.
>>
>>
>> -- 
>> Julian Field
>> www.MailScanner.info
>> MailScanner thanks transtec Computers for their support
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> 
> _________________________________________________________________
> Express yourself with cool new emoticons 
> http://www.msn.co.uk/specials/myemo
> 
> 


-- 
Diese e-mail wurde auf Viren und gefaehrliche Anhaenge durch zwei 
professionelle Virenscanner untersucht und gilt als virenfrei.
Dieser Service wird von Haus Neuer Medien zur Verfuegung gestellt. 
Bei Fragen wenden Sie sich an mailscanner at hnm.de