Emails get stuck in the incoming queue (mqueue.in)

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I have found a possible cause. Interesting that 4.39.6 doesn't suffer
the problem.

Please can you send me the message files (off-list).

Stefan Rapp wrote:

>I digged a little further and experimented with the latest
>stable version of Mailscanner. Using Mailscanner 4.39.6 the
>message gets processed without problems.
>
>syslog:
>
>MailScanner E-Mail Virus Scanner version 4.39.6 starting...
>Enabling SpamAssassin auto-whitelist functionality...
>SophosSAVI 3.91 (engine 2.28) recognizing 101594 viruses
>SophosSAVI using 110 IDE files
>lock.pl sees Config  LockType =  flock
>lock.pl sees have_module =  0
>Using locktype = flock
>New Batch: Scanning 1 messages, 9634 bytes
>Created attachment dirs for 1 messages
>Spam Checks: Starting
>SpamAssassin returned 0
>Virus and Content Scanning: Starting
>Commencing scanning by sophossavi...
>Completed scanning by sophossavi
>Commencing scanning by clamavmodule...
>ClamAVModule::INFECTED:: HTML.Phishing.Bank-87:: ./j2L5c6It018505/msg-7117-2.html
>Completed scanning by clamavmodule
>Virus Scanning: ClamAV Module found 1 infections
>Infected message j2L5c6It018505 came from ...
>Virus Scanning: Found 1 viruses
>Saved entire message to /var/spool/MailScanner/quarantine/20050322/j2L5c6It018505
>Saved infected "msg-7117-2.html" to /var/spool/MailScanner/quarantine/20050322/j2L5c6It018505
>About to deliver 1 messages
>Silent: Delivered 1 messages containing silent viruses
>MailScanner child dying of old age
>
>
>debug log:
>
>...
>debug: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1.
>debug: auto-learn: message score: 3.11094736842105, computed score for autolearn: 0.179
>debug: auto-learn? ham=0.1, spam=12, body-points=0.001, head-points=0.178, learned-points=-2.599
>debug: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
>debug: is spam? score=3.111 required=5
>debug: tests=AWL,BAYES_00,HTML_MESSAGE,HTML_NONELEMENT_00_10,NO_REAL_NAME,SPF_HELO_PASS
>debug: subtests=__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__HAS_MSGID,__HAS_SUBJECT,__MAILMAN_21,__MIME_HTML,__MIME_VERSION,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__TAG_EXISTS_HTML
>debug: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1.
>debug: auto-learn: message score: 3.111, computed score for autolearn: 0.179
>debug: auto-learn? ham=0.1, spam=12, body-points=0.001, head-points=0.178, learned-points=-2.599
>debug: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
>Stopping now as you are debugging me.
>
>
>Here Mailscanner delivers the message without error and completes
>normaly. It is just 4.40 that shows the problem.
>
>
>        Stefan
>
>+------------------------+--------------------------------------+
>| Stefan Rapp            | E-Mail:  stefan.rapp at uni-dortmund.de |
>| Universitaet Dortmund  | Phone:   +49 231 755 4668            |
>| Hochschulrechenzentrum | Fax:     +49 231 755 2731            |
>| D-44221 Dortmund       | PGP-Key: 0xE01B0621                  |
>+------------------------+--------------------------------------+
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!