Help! - MailScanner ceased working (debug output)

Fri Nov 26 17:34:16 GMT 2004

Not at all, everything goes to mqueue.in, mailscanner (according to
maillog) doesn't scan the email thus its not delivered.

I should be seeing something like:

MailScanner[29593]: New Batch: Found 4 messages waiting
MailScanner[29593]: New Batch: Scanning 1 messages, 4568 bytes
MailScanner[29593]: Virus and Content Scanning: Starting

But dont.

Matthew K Bowman
Systems Administrator
UDCom
Tel: 419-524-4330
Fax: 419-524-8757
Web: http://www.udcom.com
Email: mbowman at udcom.com
Support: techsupport at udcom.com
Sales: sales at udcom.com

Martin Hepworth <martinh at SOLID-STATE-LOGIC.COM>
Sent by: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
11/26/2004 11:34 AM
Please respond to MailScanner mailing list

        To:     MAILSCANNER at JISCMAIL.AC.UK
        cc:
        Subject:        Re: Help! - MailScanner ceased working (debug
output)

matthew

Looks fine - I presume stuff hit the outgoing MTA queue?

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

Matthew Bowman wrote:
> Debug output
>
> Starting MailScanner...
> In Debugging mode, not forking...
> debug: SpamAssassin version 3.0.0
> debug: Score set 0 chosen.
> debug: running in taint mode? no
> SA bayes lock is /root/.spamassassin/bayes.lock
> Bayes lock is at /root/.spamassassin/bayes.lock
> debug: ignore: test message to precompile patterns and load modules
> debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
> debug: config: read file /etc/mail/spamassassin/init.pre
> debug: using "/usr/share/spamassassin" for default rules dir
> debug: config: read file /usr/share/spamassassin/10_misc.cf
> debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
> debug: config: read file /usr/share/spamassassin/20_body_tests.cf
> debug: config: read file /usr/share/spamassassin/20_compensate.cf
> debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
> debug: config: read file /usr/share/spamassassin/20_drugs.cf
> debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
> debug: config: read file /usr/share/spamassassin/20_head_tests.cf
> debug: config: read file /usr/share/spamassassin/20_html_tests.cf
> debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
> debug: config: read file /usr/share/spamassassin/20_phrases.cf
> debug: config: read file /usr/share/spamassassin/20_porn.cf
> debug: config: read file /usr/share/spamassassin/20_ratware.cf
> debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
> debug: config: read file /usr/share/spamassassin/23_bayes.cf
> debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
> debug: config: read file /usr/share/spamassassin/25_hashcash.cf
> debug: config: read file /usr/share/spamassassin/25_spf.cf
> debug: config: read file /usr/share/spamassassin/25_uribl.cf
> debug: config: read file /usr/share/spamassassin/30_text_de.cf
> debug: config: read file /usr/share/spamassassin/30_text_fr.cf
> debug: config: read file /usr/share/spamassassin/30_text_nl.cf
> debug: config: read file /usr/share/spamassassin/30_text_pl.cf
> debug: config: read file /usr/share/spamassassin/50_scores.cf
> debug: config: read file /usr/share/spamassassin/60_whitelist.cf
> debug: using "/etc/mail/spamassassin" for site rules dir
> debug: config: read file /etc/mail/spamassassin/antidrug.cf
> debug: config: read file /etc/mail/spamassassin/bigevil.cf
> debug: config: read file /etc/mail/spamassassin/local.cf
> debug: using "/etc/MailScanner/spam.assassin.prefs.conf" for user prefs
> file
> debug: config: read file /etc/MailScanner/spam.assassin.prefs.conf
> debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
> debug: plugin: registered
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
> debug: plugin: registered
> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x92feb40)
> debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
> debug: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798)
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> implements 'parse_config'
> debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x92feb40)
> implements 'parse_config'
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> inhibited further callbacks
> debug: Score set 1 chosen.
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted:
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> implements 'parsed_metadata'
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.39_01
> debug: trying (3) sourceforge.net...
> debug: looking up NS for 'sourceforge.net'
> debug: NS lookup of sourceforge.net succeeded => Dns available (set
> dns_available to hardcode)
> debug: is DNS available? 1
> debug: decoding: no encoding detected
> debug: URIDNSBL: domains to query:
> debug: all '*From' addrs: ignore at compiling.spamassassin.taint.org
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: registering glue method for check_uridnsbl
> (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810))
> debug: registering glue method for check_for_spf_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798))
> debug: SPF: message was delivered entirely via trusted relays, not
> required
> debug: all '*To' addrs:
> debug: registering glue method for check_hashcash_value
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x92feb40))
> debug: registering glue method for check_for_spf_helo_fail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798))
> debug: SPF: message was delivered entirely via trusted relays, not
> required
> debug: registering glue method for check_for_spf_helo_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798))
> debug: registering glue method for check_hashcash_double_spend
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x92feb40))
> debug: registering glue method for check_for_spf_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798))
> debug: registering glue method for check_for_spf_helo_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x92e4798))
> debug: running body-text per-line regexp tests; score so far=-2.623
> debug: running uri tests; score so far=-2.623
> debug: Razor2 is available
> debug: entering helper-app run mode
>  Razor-Log: Computed razorhome from env: /root/.razor
>  Razor-Log: Found razorhome: /root/.razor
>  Razor-Log: read_file: 16 items read from /root/.razor/razor-agent.conf
> Nov 26 11:15:44.875895 check[27631]: [ 1] [bootup] Logging initiated
> LogDebugLevel=9 to stdout
> Nov 26 11:15:44.876392 check[27631]: [ 5] computed
razorhome=/root/.razor,
> conf=/root/.razor/razor-agent.conf, ident=/root/.razor/identity
> Nov 26 11:15:44.876648 check[27631]: [ 8] Client supported_engines: 1 2
3
> 4
> Nov 26 11:15:44.877247 check[27631]: [ 8]  prep_mail done: mail 1
> headers=102, mime0=1376
> Nov 26 11:15:44.877704 check[27631]: [ 5] read_file: 8 items read from
> /root/.razor/servers.discovery.lst
> Nov 26 11:15:44.878063 check[27631]: [ 5] read_file: 2 items read from
> /root/.razor/servers.nomination.lst
> Nov 26 11:15:44.878331 check[27631]: [ 5] read_file: 3 items read from
> /root/.razor/servers.catalogue.lst
> Nov 26 11:15:44.878740 check[27631]: [ 9] Assigning defaults to
> joy.cloudmark.com
> Nov 26 11:15:44.878926 check[27631]: [ 9] Assigning defaults to
> folly.cloudmark.com
> Nov 26 11:15:44.879179 check[27631]: [ 9] Assigning defaults to
> pride.cloudmark.com
> Nov 26 11:15:44.879383 check[27631]: [ 9] Assigning defaults to
> wonder.cloudmark.com
> Nov 26 11:15:44.879559 check[27631]: [ 9] Assigning defaults to
> thrill.cloudmark.com
> Nov 26 11:15:44.880412 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.truth.cloudmark.com.conf
> Nov 26 11:15:44.881004 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.stress.cloudmark.com.conf
> Nov 26 11:15:44.881542 check[27631]: [ 5] read_file: 12 items read from
> /root/.razor/server.folly.cloudmark.com.conf
> Nov 26 11:15:44.882114 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.rancor.cloudmark.com.conf
> Nov 26 11:15:44.882702 check[27631]: [ 5] read_file: 16 items read from
> /root/.razor/server.pride.cloudmark.com.conf
> Nov 26 11:15:44.883256 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.prejudice.cloudmark.com.conf
> Nov 26 11:15:44.883832 check[27631]: [ 5] read_file: 16 items read from
> /root/.razor/server.wonder.cloudmark.com.conf
> Nov 26 11:15:44.884384 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.anxiety.cloudmark.com.conf
> Nov 26 11:15:44.884946 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.tension.cloudmark.com.conf
> Nov 26 11:15:44.885523 check[27631]: [ 5] read_file: 16 items read from
> /root/.razor/server.thrill.cloudmark.com.conf
> Nov 26 11:15:44.886150 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.malice.cloudmark.com.conf
> Nov 26 11:15:44.886757 check[27631]: [ 5] read_file: 14 items read from
> /root/.razor/server.shock.cloudmark.com.conf
> Nov 26 11:15:44.887082 check[27631]: [ 5] 154361 seconds before closest
> server discovery
> Nov 26 11:15:44.887338 check[27631]: [ 6] pride.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 26 11:15:44.887597 check[27631]: [ 8] Computed supported_engines: 4
> Nov 26 11:15:44.887759 check[27631]: [ 8] Using next closest server
> pride.cloudmark.com:2703, cached info srl 5048
> Nov 26 11:15:44.887892 check[27631]: [ 8] mail 1 has no subject
> Nov 26 11:15:44.889464 check[27631]: [ 6] preproc: mail 1.0 went from
1376
> bytes to 1339
> Nov 26 11:15:44.889655 check[27631]: [ 6] computing sigs for mail 1.0,
len
> 1339
> Nov 26 11:15:44.891458 check[27631]: [ 6] skipping whitelist file
> (empty?): /root/.razor/razor-whitelist
> Nov 26 11:15:44.891659 check[27631]: [ 5] Connecting to
> pride.cloudmark.com ...
> Nov 26 11:15:44.956354 check[27631]: [ 3] Unable to connect to
> pride.cloudmark.com:2703; Reason: Connection refused.
> Nov 26 11:15:44.956634 check[27631]: [ 5] 161663 seconds before closest
> server discovery
> Nov 26 11:15:44.956874 check[27631]: [ 6] wonder.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 26 11:15:44.957085 check[27631]: [ 8] Computed supported_engines: 4
> Nov 26 11:15:44.957231 check[27631]: [ 8] Using next closest server
> wonder.cloudmark.com:2703, cached info srl 5048
> Nov 26 11:15:44.957392 check[27631]: [ 5] Connecting to
> wonder.cloudmark.com ...
> Nov 26 11:15:45.077689 check[27631]: [ 8] Connection established
> Nov 26 11:15:45.077888 check[27631]: [ 4] wonder.cloudmark.com >> 36
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 26 11:15:45.078283 check[27631]: [ 4] wonder.cloudmark.com << 25
> Nov 26 11:15:45.078369 check[27631]: [ 6] cn=razor-agents&cv=2.36
> Nov 26 11:15:45.078670 check[27631]: [ 6] wonder.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 26 11:15:45.078891 check[27631]: [ 8] Computed supported_engines: 4
> Nov 26 11:15:45.079110 check[27631]: [ 8] mail 1.0 e4 sig:
> xFaZIZUVHk90OQfARnenjx5BZTMA
> Nov 26 11:15:45.079296 check[27631]: [ 8] preparing 1 queries
> Nov 26 11:15:45.079546 check[27631]: [ 8] sending 1 batches
> Nov 26 11:15:45.079745 check[27631]: [ 4] wonder.cloudmark.com << 52
> Nov 26 11:15:45.079820 check[27631]: [ 6]
> a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMA
> Nov 26 11:15:45.351281 check[27631]: [ 4] wonder.cloudmark.com >> 5
> Nov 26 11:15:45.351376 check[27631]: [ 6] response to sent.2
> p=0
> Nov 26 11:15:45.351792 check[27631]: [ 6] mail 1.0 e=4
> sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.
> Nov 26 11:15:45.351954 check[27631]: [ 7] method 4: mail 1.0:
> no-contention part, spam=0
> Nov 26 11:15:45.352034 check[27631]: [ 7] method 4: mail 1: all
> non-contention parts not spam, mail not spam
> Nov 26 11:15:45.352111 check[27631]: [ 3] mail 1 is not known spam.
> Nov 26 11:15:45.352208 check[27631]: [ 5] disconnecting from server
> wonder.cloudmark.com
> Nov 26 11:15:45.352409 check[27631]: [ 4] wonder.cloudmark.com << 5
> Nov 26 11:15:45.352482 check[27631]: [ 6] a=q
> debug: Using results from Razor v2.36
> debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
> debug: leaving helper-app run mode
> debug: Razor2 results: spam? 0  highest cf score: 0
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> implements 'check_tick'
> debug: running raw-body-text per-line regexp tests; score so far=-2.623
> debug: running full-text regexp tests; score so far=-2.623
> debug: Razor2 is available
> debug: Current PATH is: /sbin:/bin:/usr/sbin:/usr/bin
> debug: Pyzor is not available: pyzor not found
> debug: Running tests for priority: 500
> debug: RBL: success for 1 of 1 queries
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8152810)
> implements 'check_post_dnsbl'
> debug: running meta tests; score so far=-2.623
> debug: running header regexp tests; score so far=-1.053
> debug: running body-text per-line regexp tests; score so far=-1.053
> debug: running uri tests; score so far=-1.053
> debug: running raw-body-text per-line regexp tests; score so far=-1.053
> debug: running full-text regexp tests; score so far=-1.053
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=-1.053
> debug: running header regexp tests; score so far=-1.053
> debug: lock: 27631 created
> /root/.spamassassin/auto-whitelist.lock.smithers.vbcomm.net.27631
> debug: lock: 27631 trying to get lock on
> /root/.spamassassin/auto-whitelist with 0 retries
> debug: lock: 27631 link to /root/.spamassassin/auto-whitelist.lock: link
> ok
> debug: Tie-ing to DB file R/W in /root/.spamassassin/auto-whitelist
> debug: auto-whitelist (db-based):
> ignore at compiling.spamassassin.taint.org|ip=none scores 0/0
> debug: AWL active, pre-score: -1.053, autolearn score: -1.053, mean:
> undef, IP: undef
> debug: DB addr list: untie-ing and unlocking.
> debug: DB addr list: file locked, breaking lock.
> debug: unlock: 27631 unlink /root/.spamassassin/auto-whitelist.lock
> debug: Post AWL score: -1.053
> debug: running body-text per-line regexp tests; score so far=-1.053
> debug: running uri tests; score so far=-1.053
> debug: running raw-body-text per-line regexp tests; score so far=-1.053
> debug: running full-text regexp tests; score so far=-1.053
> debug: is spam? score=-1.053 required=3.8
> debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
> debug:
>
subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID
>
>
>
>
> Matthew K Bowman
> Systems Administrator
> UDCom
> Tel: 419-524-4330
> Fax: 419-524-8757
> Web: http://www.udcom.com
> Email: mbowman at udcom.com
> Support: techsupport at udcom.com
> Sales: sales at udcom.com
>
>
>
>
> Martin Hepworth <martinh at SOLID-STATE-LOGIC.COM>
> Sent by: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> 11/26/2004 11:06 AM
> Please respond to MailScanner mailing list
>
>         To:     MAILSCANNER at JISCMAIL.AC.UK
>         cc:
>         Subject:        Re: Help! - MailScanner ceased working
>
>
> matthew
>
> stop the mailscanner service
>
> edit the MailScanner.conf file and turn on both lots of debug options
>
> run checkmailscanner as the user defined in the MailScanner.conf and
> drop the results back here..
>
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Matthew Bowman wrote:
>
>>Hello
>>
>>MailScanner is running with pid 842 is the only output I get. Both are
>
> run
>
>>by the same user.
>>
>>/var/log/maillog
>>
>>Nov 26 10:08:09 smithers MailScanner[1503]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:08:19 smithers MailScanner[1518]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:08:29 smithers MailScanner[1519]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:08:39 smithers MailScanner[1520]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:08:49 smithers MailScanner[1521]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:08:59 smithers MailScanner[1524]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:09:09 smithers MailScanner[1526]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:09:19 smithers MailScanner[1527]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:09:29 smithers MailScanner[1528]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>Nov 26 10:09:39 smithers MailScanner[1530]: MailScanner E-Mail Virus
>>Scanner version 4.35.11 starting...
>>
>>ps
>>
>>root       842  0.0  1.2 13908 12524 ?       S    09:32   0:00
>>/usr/bin/perl -I/usr/lib/MailScanner /usr/sbin/MailScanner /etc/MailS
>>root       843  0.0  0.0     0    0 ?        Z    09:32   0:01
>>[MailScanner <defunct>]
>>root      1039  0.0  0.0     0    0 ?        Z    09:32   0:01
>>[MailScanner <defunct>]
>>root      1040  0.0  0.0     0    0 ?        Z    09:32   0:01
>>[MailScanner <defunct>]
>>root      1041  0.0  0.0     0    0 ?        Z    09:32   0:01
>>[MailScanner <defunct>]
>>root      1042  0.0  0.0     0    0 ?        Z    09:33   0:01
>>[MailScanner <defunct>]
>>root      1043  0.0  0.0     0    0 ?        Z    09:33   0:01
>>[MailScanner <defunct>]
>>root      1044  0.0  0.0     0    0 ?        Z    09:33   0:01
>>[MailScanner <defunct>]
>>root      1045  0.0  0.0     0    0 ?        Z    09:33   0:01
>>[MailScanner <defunct>]
>>root      1046  0.0  0.0     0    0 ?        Z    09:33   0:01
>>[MailScanner <defunct>]
>>root      1539 34.2  0.0     0    0 ?        Z    10:10   0:01
>>[MailScanner <defunct>]
>>
>>Thanks for your help
>>
>>Matthew K Bowman
>>Systems Administrator
>>UDCom
>>Tel: 419-524-4330
>>Fax: 419-524-8757
>>Web: http://www.udcom.com
>>Email: mbowman at udcom.com
>>Support: techsupport at udcom.com
>>Sales: sales at udcom.com
>>
>>
>>
>>
>>Martin Hepworth <martinh at SOLID-STATE-LOGIC.COM>
>>Sent by: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>>11/26/2004 09:58 AM
>>Please respond to MailScanner mailing list
>>
>>        To:     MAILSCANNER at JISCMAIL.AC.UK
>>        cc:
>>        Subject:        Re: Help! - MailScanner ceased working
>>
>>
>>Matthew
>>
>>if results are fine from running in debug mode then it should have
>>delivered that batch of emails.....
>>
>>Can you drop the output of the checkmailscanner to the list?
>>
>>also are you running checkmailscanner as the same user MailScanner
>>normally runs as?
>>
>>--
>>Martin Hepworth
>>Snr Systems Administrator
>>Solid State Logic
>>Tel: +44 (0)1865 842300
>>
>>
>>Matthew Bowman wrote:
>>
>>
>>>Hello,
>>>
>>>One of our 3 mailscanner servers has stopped processing e-mail.  There
>>
>>are
>>
>>
>>>no errors in /var/log/maillog or messages that indicate and sort of
>>>problem.  Email arrives and gets put into mqueue.in and just stays
>>
>>there.
>>
>>
>>>Nothing has changed in MailScanner.conf or sendmail.cf.  I'm at a loss
>>
>>as
>>
>>
>>>to how this has happened all of a sudden.  I run mailscanner and
>>>spamassassin in debug mode and the results where fine.  What else
should
>>
>>I
>>
>>
>>>be looking at?
>>>
>>>All 3 mailscanner servers run MS 4.35-11, SA 3.0.0 and Redhat 7.3
>>>
>>>Please help!
>>>
>>>Thanks
>>>
>>>Matthew
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>
>>
>>**********************************************************************
>>
>>This email and any files transmitted with it are confidential and
>>intended solely for the use of the individual or entity to whom they
>>are addressed. If you have received this email in error please notify
>>the system manager.
>>
>>This footnote confirms that this email message has been swept
>>for the presence of computer viruses and is believed to be clean.
>>
>>**********************************************************************
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!