Mailscanner does not identify attachment in mail

Fri May 5 09:33:22 IST 2006

On Thursday, May 04, 2006 12:38 PM Julian Field wrote:

> It should have found the uu-encoded file. Have you got that feature
> switched on? 
> Look for "uu" or "UU" in MailScanner.conf.

Well I upgraded to 4.53.7 on that box and today the next one came in. It
again was identified as spam.

May  5 10:00:40 proxy-hb MailScanner[98493]: New Batch: Scanning 1 messages,
35159 bytes
May  5 10:00:40 proxy-hb MailScanner[98493]: Saved archive copies of
1FbvEk-0002FH-GK
May  5 10:00:40 proxy-hb MailScanner[98493]: MCP Checks: Starting
May  5 10:00:40 proxy-hb MailScanner[98493]: Spam Checks: Starting
May  5 10:00:52 proxy-hb MailScanner[98493]: Spam Checks: Found 1 spam
messages
May  5 10:00:52 proxy-hb MailScanner[98493]: Spam Actions: message
1FbvEk-0002FH-GK actions are store
May  5 10:00:53 proxy-hb MailScanner[98493]: Virus and Content Scanning:
Starting
May  5 10:00:53 proxy-hb MailScanner[98493]: Scan started at Fri May  5
10:00:53 2006
May  5 10:00:53 proxy-hb MailScanner[98493]: Database version: 2006-05-05_01
May  5 10:00:53 proxy-hb MailScanner[98493]: Scan ended at Fri May  5
10:00:53 2006
May  5 10:00:53 proxy-hb MailScanner[98493]: 3 files scanned
May  5 10:00:55 proxy-hb MailScanner[98493]: Batch (1 message) processed in
15.31 seconds
May  5 10:00:55 proxy-hb MailScanner[98493]: "Always Looked Up Last" took
0.02 seconds

Two problems/questions:

1. Is the uuencoded file now identified as such by MailScanner? It says 3
files scanned so I would assume so but I am not sure. I have Find UU-Encoded
Files = yes in MailScanner.conf. The attachment is a virus free pdf so it is
ok that no alarms pop up.

2. Why does Spamassassin identify it as spam? Clearly it does not recognize
the uuencoded file as such and therefore hits strange rules (like BAYES_99,
SARE_URI_EUQALS etc.) pushing it over the High Scoring Spam limit. Is this a
SpamAssassin or a MailScanner problem? In MIME-Mails SA does recognize
attachments does it not and exclude it from scanning, does it not=

Regards,
  JP
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3104 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060505/01caa2be/smime.bin