MCP Error message

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Ah, your SAMPLE_RULES2 rule doesn't have a header name.

pat png wrote:

>Julian,
>
>Yes,done. But the same problem.
>
>rgds
>Patrick
>
>
>--- Julian Field <MailScanner at ECS.SOTON.AC.UK> wrote:
>
>
>>You need a space after Subject and before =~
>>
>>Patrick wrote:
>>
>>
>>
>>>Pls help,
>>>
>>>I had this error message when run tail -f
>>>
>>>
>>var/log/maillog.
>>
>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>11 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>12 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>13 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>15 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>16 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>May 6 18:17:57 mail MailScanner[2888]: Syntax error
>>>
>>>
>>in first field in line
>>
>>
>>>17 of ruleset /etc/MailScanner/mcp/10_example.cf
>>>
>>>Below is the content in 10_example.cf:
>>>header     SAMPLE_RULES1   Subject=~ /sexual/i
>>>describe   SAMPLE_RULES1   Banned Subject
>>>score       SAMPLE_RULES1  2
>>>
>>>header     SAMPLE_RULES2   /testing/i
>>>describe   SAMPLE_RULES2   Banned body text
>>>score       SAMPLE_RULES3   5
>>>
>>>What is wrong?
>>>
>>>Inside the mailscanner.conf, I change 4 lines.
>>>1. MCPP Checks = yes
>>>2. MCP Actions = store
>>>3. High Scoring MCP Actions = store
>>>4. Is defintely MCP = %mcp-dir%/10_example.cf
>>>
>>>
>>>rgds
>>>Patrick
>>>
>>>------------------------ MailScanner list
>>>
>>>
>>------------------------
>>
>>
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with
>>>
>>>
>>the words:
>>
>>
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the Wiki
>>>
>>>
>>(http://wiki.mailscanner.info/) and
>>
>>
>>>the archives
>>>
>>>
>>(http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>
>>>Support MailScanner development - buy the book off
>>>
>>>
>>the website!
>>
>>
>>>
>>>
>>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Buy the MailScanner book at
>>www.MailScanner.info/store
>>Professional Support Services at www.MailScanner.biz
>>MailScanner thanks transtec Computers for their
>>support
>>
>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6
>>5947 1415 B654
>>
>>------------------------ MailScanner list
>>------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with
>>the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the Wiki
>>(http://wiki.mailscanner.info/) and
>>the archives
>>(http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off
>>the website!
>>
>>
>>
>
>
>
>__________________________________
>Yahoo! Mail Mobile
>Take Yahoo! Mail with you! Check email on your mobile phone.
>http://mobile.yahoo.com/learn/mail
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!