Some Messages Double Scanned

[chardlist]

Some more information.  It seems like the bayes rule checks are what is
causing the problem.

 

I have had a cron job that runs every week to execute the following
commands to rebuild the bayes files and clear out old tokens.

 

service MailScanner stop

then...

/usr/bin/sa-learn -C /usr/mailscanner/etc/spam.assassin.prefs.conf
--force-expire

then...

chown mailnull:nobody /usr/mailscanner/bayes/bayes_*

and finally...

service MailScanner start

 

The commands above are all executing just fine, but what I’ve
noticed is that the bayes_seen file does not reduce in size as it
normally has done.  The bayes_toks file does get smaller as I would
expect and has grown to 42MB.

 

What’s the best way to proceed from here?  Should I can the bayes
files and have it start rebuilding from scratch, or is there a way to get
them all working again?

 

Thanks,

-Brendan

 

 

 

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of chardlist
Sent: Thursday, January 12, 2006 5:30 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Some Messages Double Scanned

 

I'm noticing that some messages are getting double-scanned by
MailScanner.

Any thoughts on this?  Here are headers from a sample message.

 

X-ChardNet-MailScanner-SpamCheck: not spam, SpamAssassin (score=3.593,

      required 5, DATE_IN_FUTURE_03_06 0.07, HTML_50_60 0.10,

      HTML_MESSAGE 0.00, MIME_HTML_MOSTLY 0.28, MPART_ALT_DIFF 1.50,

      RAZOR2_CF_RANGE_51_100 1.49, RAZOR2_CHECK 0.15), not spam,

SpamAssassin (score=3.199,

      required 5, BAYES_50 0.00, DATE_IN_FUTURE_03_06 1.96,

      HTML_50_60 0.13, HTML_MESSAGE 0.00, MIME_HTML_MOSTLY 1.10)

X-ChardNet-MailScanner-SpamScore: 3, 3

 

 

I'm running MailScanner 4.47.4 on Redhat 9 with Exim 4.52

 

 

Thanks for any assistance,

 

-Brendan

 

------------------------ MailScanner list ------------------------

To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:

'leave mailscanner' in the body of the email.

Before posting, read the Wiki (http://wiki.mailscanner.info/) and

the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

 

Support MailScanner development - buy the book off the website!

 


------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!