High Scoring Spam and Virus scanning

Julian Field MailScanner at ecs.soton.ac.uk
Thu Jun 2 22:14:57 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

It is partly a design change, but you have pointed out a common case 
where my current version is inefficient. If "Keep Spam And MCP Archive 
Clean" is no then there is no need to keep processing messages that 
won't be delivered.

Please try the attached patch for MessageBatch.pm and let me know how 
you get on.

Steve Ellis wrote:

> Since upgrading to MailScanner 4.42.8-1 from 4.35.11 messages that 
> were previously deleted due to High scoring spam action are now also 
> being virus scanned. Is this the result of a design change that I 
> missed, or a bug? If it's from a design change is there any setting 
> which would give the previous behavior?
>
> I have
>     Silent Viruses = All-Viruses
>     Quarantine Silent Viruses = no
>     Keep Spam And MCP Archive Clean = no
>
> Example Log entry:
> Jun  2 07:52:38 ben MailScanner[29854]: Message j52BqPBf030435 from 
> 70.106.83.54 (tchen at tplinc.com) to kazakcomposites.com is spam, 
> SpamAssassin (score=36.958, required 5, autolearn=spam, ....
> Jun  2 07:52:38 ben MailScanner[29854]: Spam Actions: message 
> j52BqPBf030435 actions are delete
> Jun  2 07:52:39 ben MailScanner[29854]: ClamAVModule::INFECTED:: 
> Worm.SomeFool.Gen-1:: ./j52BqPBf030435/your_document.pif
>
>
>
>
> Steve Ellis
> Sr. Engineer
> KaZaK Composites, Inc
>
> 781.932.5667 x105
>
> ***********  KaZaK Composites, Inc  CONFIDENTIAL  ***********
> Unless otherwise specified, the information contained in this
> e-mail message should be considered: privileged, confidential,
> and protected from disclosure.
>

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Application/X-GZIP  818bytes. ]
    [ Unable to print this part. ]




More information about the MailScanner mailing list