MailScanner: Could not analyze message

[Steen, Glenn]

That would be the CantAnalyze (in languages.conf)... Only place it
seems to fire is in the Explode function, if a MIME boundary
exists and is equivalent to the empty string ("").
Might point a fat finger at the digest creation software?

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Dave Duffner - PSCGi
> Sent: den 17 februari 2005 15:14
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: MailScanner: Could not analyze message
> 
> 
> Greetings,
> 
>         Still stumped on this one, has anyone else at least
> seen these pop up?  Or might have a clue where the failures
> are or what logs I should be looking in to get a better grip
> on why this is happening?
> 
>         We get the following messages encased in the virus
> warning e-mails MS issues:
> 
>         MailScanner: Could not analyze message
> 
>         It seems to be most prevalent in Digest-mode email
> from several list servers we have using the main server
> as part of the path.  We want the outgoing mail scanned to
> ensure nothing gets past in or out, but randomly this pops
> up.
> 
>         We're using MS, ClamAV & Spsmassassin in combo on an
> Ensim-based linux setup.  Normally it's worked just fine,
> but within the last few weeks these started cropping up
> on outbound messages that contain digests and inbound messages
> that seem to contain FWD's from others to users on our servers.
> Notable is that it happens quite a bit to someone using
> Yahoo that forwards random 'stuff' to one of our users.
> 
>         Any clues helpful!
> 
>         Dave
> 
> 
> 
> --
> Message scanned by MailScanner, and is believed to be clean.
> CONFIDENTIALITY NOTICE:  This transmission intended for the
> specified destination and person.  If this is not you, this
> e-mail must be deleted immediately.     www.nwcweb.com
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!