MailScanner ANNOUNCE: 4.42.9 released - bug not fixed

[Julian Field]

On 1 Jun 2005, at 16:58, Quentin Campbell wrote:
>> -----Original Message-----
>> From: MailScanner mailing list
>> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
>> Sent: 01 June 2005 16:25
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Re: MailScanner ANNOUNCE: 4.42.9 released - bug not fixed
>>
>>
> [snip]
>
>> Your High-scoring MCP threshold is 10, but what are the scores of the
>> MCP rules you are using? Are they 10 or above, or below? I haven't
>> yet seen evidence that the High-scoring MCP threshold is actually
>> reached.
>>
>
> Julian
>
> Appended are the log records (there are just 3) for a message  
> caught by
> MCP on a 4.42.9 system and which, because it scored 10, should be
> deleted. There are no further Sendmail records because MailScanner
> deleted it although it has not logged that fact. That is the bug!
>
> I am seeing the same bug when the score is 20 or 30.
>
> Jun  1 14:46:29 cheviot4 sendmail[14718]: j51DkTbp014718:
> from=<root at ucsnew2.ncl.ac.uk>, size=538, class=0, nrcpts=1,
> msgid=<200506011346.j51DkSeI030356 at ucsnew2.ncl.ac.uk>, proto=ESMTP,
> daemon=MTA, relay=ucsnew2.ncl.ac.uk [128.240.233.6]
> Jun  1 14:46:29 cheviot4 sendmail[14718]: j51DkTbp014718:
> to=<nqgc at cpx.ncl.ac.uk>, delay=00:00:00, mailer=esmtp, pri=30538,
> stat=queued
> Jun  1 14:46:29 cheviot4 MailScanner[14321]: Message j51DkTbp014718  
> from
> 128.240.233.6 (root at ucsnew2.ncl.ac.uk) to cpx.ncl.ac.uk is MCP,
> MCP-Checker (score=10, required 1, NCL_TESTMCP01 10.00)

Do you get the "delete" spam action logged at all?
Clearly the "delete" mcp action isn't being logged how I intended. I  
will have to take a look at that bit.
-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!