Normal mail in quarantine

Plant, Dean dean.plant at roke.co.uk
Fri Mar 31 11:52:16 IST 2006


I have just gone live with an upgraded MailScanner server and noticed
that some non spam & non dangerous mail is being stored in quarantine.
Any idea's to what I may have configured incorrectly.

My message actions from /etc/MailScanner/MailScanner.conf

Spam Actions = store attachment deliver
High Scoring Spam Actions = forward emailaddress at ourdomin.co.uk
Non Spam Actions = deliver
Non MCP Actions = deliver
MCP Actions = deliver
High Scoring MCP Actions = deliver

Viewing the quarantine in Mailwatch shows that most messages should not
be in there, example below

Anti-Virus/Dangerous Content Protection
Virus:	 N 
Blocked File:	 N 
Other Infection:	 N 
SpamAssassin
Spam:	 N   Action(s): deliver
High Scoring Spam:	 N 
SpamAssassin Spam:	 N 
Listed in RBL:	 N 
Spam Whitelisted:	 N 
Spam Blacklisted:	 N 
SpamAssassin Autolearn:	 N 
SpamAssassin Score:	-0.25
Spam Report:	
	Score	Matching Rule	Description-2.60	BAYES_00
Bayesian spam probability is 0 to 1%
0.00	HTML_MESSAGE	HTML included in message
0.23	HTML_TAG_BALANCE_BODY	HTML has unbalanced "body" tags
0.12	HTML_TEXT_AFTER_BODY	HTML contains text after BODY close tag
2.00	SARE_RAND_1	 
Message Content Protection (MCP)
MCP:	 N 
High Scoring MCP:	 N 
SpamAssassin MCP:	 N 
MCP Whitelisted:	 N 
MCP Blacklisted:	 N 

MailScanner -V
This is CentOS release 4.2 (Final)
This is Perl version 5.008005 (5.8.5)

This is MailScanner version 4.51.6
Module versions are:
1.00    AnyDBM_File
1.14    Archive::Zip
1.03    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.05    Fcntl
2.73    File::Basename
2.08    File::Copy
2.01    FileHandle
1.06    File::Path
0.14    File::Temp
1.32    HTML::Entities
3.48    HTML::Parser
2.35    HTML::TokeParser
1.21    IO
1.10    IO::File
1.123   IO::Pipe
1.71    Mail::Header
3.05    MIME::Base64
5.419   MIME::Decoder
5.419   MIME::Decoder::UU
5.419   MIME::Head
5.419   MIME::Parser
3.03    MIME::QuotedPrint
5.419   MIME::Tools
0.10    Net::CIDR
1.08    POSIX
1.77    Socket
0.08    Sys::Syslog
1.86    Time::HiRes
1.02    Time::localtime

Optional module versions are:
0.17    Convert::TNEF
1.810   DB_File
1.11    DBD::SQLite
1.50    DBI
1.08    Digest
1.01    Digest::HMAC
2.33    Digest::MD5
2.10    Digest::SHA1
0.44    Inline
0.17    Mail::ClamAV
3.001001        Mail::SpamAssassin
1.997   Mail::SPF::Query
0.15    Net::CIDR::Lite
0.48    Net::DNS
0.31    Net::LDAP
1.94    Parse::RecDescent
missing SAVI
1.4     Sys::Hostname::Long
2.42    Test::Harness
0.47    Test::Simple
1.95    Text::Balanced
1.35    URI

Thanks

Dean


More information about the MailScanner mailing list