Normal mail in quarantine

[Martin Hepworth]

Dean

Check what that actions for 'normal' email are - if it's store then that's
why its quarantining them - which is a good idea (TM) when using MailWatch
as it means you can run the lean as spam/ham functions and other....

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Plant, Dean
> Sent: 31 March 2006 11:52
> To: MailScanner discussion
> Subject: Normal mail in quarantine
> 
> I have just gone live with an upgraded MailScanner server and noticed
> that some non spam & non dangerous mail is being stored in quarantine.
> Any idea's to what I may have configured incorrectly.
> 
> My message actions from /etc/MailScanner/MailScanner.conf
> 
> Spam Actions = store attachment deliver
> High Scoring Spam Actions = forward emailaddress at ourdomin.co.uk
> Non Spam Actions = deliver
> Non MCP Actions = deliver
> MCP Actions = deliver
> High Scoring MCP Actions = deliver
> 
> Viewing the quarantine in Mailwatch shows that most messages should not
> be in there, example below
> 
> Anti-Virus/Dangerous Content Protection
> Virus:	 N
> Blocked File:	 N
> Other Infection:	 N
> SpamAssassin
> Spam:	 N   Action(s): deliver
> High Scoring Spam:	 N
> SpamAssassin Spam:	 N
> Listed in RBL:	 N
> Spam Whitelisted:	 N
> Spam Blacklisted:	 N
> SpamAssassin Autolearn:	 N
> SpamAssassin Score:	-0.25
> Spam Report:
> 	Score	Matching Rule	Description-2.60	BAYES_00
> Bayesian spam probability is 0 to 1%
> 0.00	HTML_MESSAGE	HTML included in message
> 0.23	HTML_TAG_BALANCE_BODY	HTML has unbalanced "body" tags
> 0.12	HTML_TEXT_AFTER_BODY	HTML contains text after BODY close tag
> 2.00	SARE_RAND_1
> Message Content Protection (MCP)
> MCP:	 N
> High Scoring MCP:	 N
> SpamAssassin MCP:	 N
> MCP Whitelisted:	 N
> MCP Blacklisted:	 N
> 
> MailScanner -V
> This is CentOS release 4.2 (Final)
> This is Perl version 5.008005 (5.8.5)
> 
> This is MailScanner version 4.51.6
> Module versions are:
> 1.00    AnyDBM_File
> 1.14    Archive::Zip
> 1.03    Carp
> 1.119   Convert::BinHex
> 1.00    DirHandle
> 1.05    Fcntl
> 2.73    File::Basename
> 2.08    File::Copy
> 2.01    FileHandle
> 1.06    File::Path
> 0.14    File::Temp
> 1.32    HTML::Entities
> 3.48    HTML::Parser
> 2.35    HTML::TokeParser
> 1.21    IO
> 1.10    IO::File
> 1.123   IO::Pipe
> 1.71    Mail::Header
> 3.05    MIME::Base64
> 5.419   MIME::Decoder
> 5.419   MIME::Decoder::UU
> 5.419   MIME::Head
> 5.419   MIME::Parser
> 3.03    MIME::QuotedPrint
> 5.419   MIME::Tools
> 0.10    Net::CIDR
> 1.08    POSIX
> 1.77    Socket
> 0.08    Sys::Syslog
> 1.86    Time::HiRes
> 1.02    Time::localtime
> 
> Optional module versions are:
> 0.17    Convert::TNEF
> 1.810   DB_File
> 1.11    DBD::SQLite
> 1.50    DBI
> 1.08    Digest
> 1.01    Digest::HMAC
> 2.33    Digest::MD5
> 2.10    Digest::SHA1
> 0.44    Inline
> 0.17    Mail::ClamAV
> 3.001001        Mail::SpamAssassin
> 1.997   Mail::SPF::Query
> 0.15    Net::CIDR::Lite
> 0.48    Net::DNS
> 0.31    Net::LDAP
> 1.94    Parse::RecDescent
> missing SAVI
> 1.4     Sys::Hostname::Long
> 2.42    Test::Harness
> 0.47    Test::Simple
> 1.95    Text::Balanced
> 1.35    URI
> 
> Thanks
> 
> Dean
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************