Strange archive loop

[Mike Tremaine]

On Sun, 2006-02-12 at 08:26 -0800, Mike Tremaine wrote:
> 2 days ago a zip file came in that got stopped because it had a .exe
> inside of it. No problems there it did the right thing. But ever since
> then every email talks about it. ?? [See log snip below]
> 
> I have since upgraded MailScanner and SpamAssassin [4.37 -> 4.50, and
> 3.0.4 -> 3.1.0]... No problems with the upgrades full start and stops
> and yet the messages continue. I've never seen a problem like this
> before, anyone have any clues?
> 
> maillog:
> 
> Feb 12 08:23:29 sigil sendmail[13991]: k1CGMcEb013991: from=<edu382 at flyingwebsites.com >, size=1349, class=0, nrcpts=2, msgid=<20050823GO45adhjhTVTT56u at kahramaa.com.qa >, proto=SMTP, daemon=MTA, relay=84-72-40-55.dclient.hispeed.ch [84.72.40.55]
> Feb 12 08:23:29 sigil sendmail[13991]: k1CGMcEb013991: to=<atwood at softpak.com>, delay=00:00:08, mailer=smtp, pri=61349, stat=queued
> Feb 12 08:23:29 sigil sendmail[13991]: k1CGMcEb013991: to=<palacios at softpak.com>, delay=00:00:08, mailer=smtp, pri=61349, stat=queued
> Feb 12 08:23:29 sigil MailScanner[12701]: New Batch: Found 2 messages waiting
> Feb 12 08:23:29 sigil MailScanner[12701]: New Batch: Scanning 1 messages, 1875 bytes
> Feb 12 08:23:30 sigil MailScanner[12701]: Archived message k1CGMcEb013991 to mbox file /var/spool/MailScanner/quarantine/20060210/k1AHJdDT014115/cal-waste-vpn.zip
> Feb 12 08:23:30 sigil MailScanner[12701]: Saved archive copies of k1CGMcEb013991
> Feb 12 08:23:32 sigil MailScanner[12701]: Spam Checks: Found 1 spam messages
> Feb 12 08:23:32 sigil MailScanner[12701]: Virus and Content Scanning: Starting
> 
> See the Archived message line.... 
> I can cat the files directly in the mqueue.in and there is no
> attachments??


Never mind... sigh looks like someone who had more guts then knowledge
edited Mailscanner.conf

Archive Mail = /var/spool/MailScanner/quarantine/20060210/k1AHJdDT014115/cal-waste-vpn.zip

err.... :/ [Guess i get to make a phone monday and ask nicely not to
touch my configs...]

-Mike