4.34.8 MCP bugs

[Jason Kau]

Quoting Julian Field <mailscanner at ECS.SOTON.AC.UK>:
> At 12:15 12/10/2004, you wrote:
> >As for fixing bugs, I was mainly referring to the the fact that MCP message
> >files aren't stored using the Quaratine User/Group settings
>
> Attached is a tiny patch for MCPMessage.pm which will fix this.

Thanks!  Is this fix (or a more complete one?) going to show up in 4.35.X and
later?  I see 4.35.3 doesn't have it.

> >  and that every
> >message is logged as MCP in syslog.
>
> Not for me it isn't. If you log the detailed report, what does it say for
> messages that shouldn't have been logged as MCP? And is it just a logging
> problem?

Yes it's just a logging problem.  An email that doesn't get marked as SPAM or
MCP shows:

Oct 12 15:04:23 cheetah MailScanner[22501]: New Batch: Scanning 1 messages, 1141
bytes
Oct 12 15:04:23 cheetah MailScanner[22501]: Spam Checks: Starting
Oct 12 15:04:33 cheetah MailScanner[22501]: Message i9CJ4M5Y022755 from
199.77.147.250 (jkau at cnd.gatech.edu) to jasper.k12.ga.us is not spam,
SpamAssassin (score=0, required 3, USER_AGENT_PINE 0.00)
Oct 12 15:04:33 cheetah MailScanner[22501]: MCP Checks: Starting
Oct 12 15:04:33 cheetah MailScanner[22501]: Virus and Content Scanning: Starting
Oct 12 15:04:34 cheetah MailScanner[22501]: Uninfected: Delivered 1 messages

However, if an email is marked as spam but not as MCP (I'm sending these emails
to test MCP so I know they're not matching my MCP SpamAssassin rules), it
always says "Found 1 MCP messages":

Oct 12 15:05:48 cheetah MailScanner[22687]: Spam Checks: Found 1 spam messages
Oct 12 15:05:48 cheetah MailScanner[22687]: Spam Actions: message i9CJ5fV3022834
actions are alerts at localhost,forward
Oct 12 15:05:48 cheetah MailScanner[22687]: MCP Checks: Starting
Oct 12 15:05:48 cheetah MailScanner[22687]: MCP Checks: Found 1 MCP messages
Oct 12 15:05:48 cheetah MailScanner[22660]: Virus and Content Scanning: Starting
Oct 12 15:05:48 cheetah MailScanner[22660]: Uninfected: Delivered 1 messages

In other words "MCP Checks: Found X MCP messages" seems to be just a repeating
"Spam Check: Found X spam messages" but with the phrase "MCP Checks" replacing
"Spam Check".

Does this make sense?

--
Jason Kau
Consultant
Jasper County Schools
Monticello, GA

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).