MCP broken?
Denis Beauchemin
Denis.Beauchemin at USherbrooke.ca
Tue May 16 14:10:26 IST 2006
Hello again,
After experimenting with MCP on a test system I come to the conclusion
that something is not working as it should:
Non MCP Actions = deliver
MCP Actions = deliver forward address at gmail.com
High Scoring MCP Actions = deliver forward address at gmail.com
Now I send an email that triggers enough MCP rules to match one of the
last 2 rules. The email gets sent OK to the forward address but is not
delivered to the recipient. Why?
Here are the maillog messages:
May 15 16:57:55 localhost MailScanner[1885]: MailScanner child caught a
SIGHUP
May 15 16:57:55 localhost MailScanner[1977]: MailScanner E-Mail Virus
Scanner version 4.54.2 starting...
May 15 16:57:55 localhost MailScanner[1977]: Read 718 hostnames from the
phishing whitelist
May 15 16:57:56 localhost MailScanner[1977]: Using SpamAssassin results
cache
May 15 16:57:56 localhost MailScanner[1977]: Connected to SpamAssassin
cache database
May 15 16:57:56 localhost MailScanner[1977]: Enabling SpamAssassin
auto-whitelist functionality...
May 15 16:57:56 localhost MailScanner[1977]: I have found scanners
installed, and will use them all by default.
May 15 16:57:56 localhost MailScanner[1977]: You appear to have no virus
scanners installed at all! This is not good. If you have installed any,
then check your virus.scanners.conf file to make sure the locations of
your scanners are correct
May 15 16:57:56 localhost MailScanner[1977]: Using locktype = flock
May 15 16:58:42 localhost sendmail[2016]: k4FKwgcD002016:
from=<me at USherbrooke.ca>, size=444, class=0, nrcpts= 1,
msgid=<4468EB82.5000302 at USherbrooke.ca>, proto=ESMTP, daemon=MTA,
relay=localhost.localdomain [127.0.0.1]
May 15 16:58:42 localhost sendmail[2016]: k4FKwgcD002016:
to=<me at USherbrooke.ca>, delay=00:00:00, mailer=relay, pri=30444, stat=queued
May 15 16:58:45 localhost MailScanner[1977]: New Batch: Scanning 1
messages, 946 bytes
May 15 16:58:45 localhost MailScanner[1977]: MCP Checks: Starting
May 15 16:58:45 localhost MailScanner[1977]: Message k4FKwgcD002016 from
127.0.0.1 (me at usherbrooke.ca) to usherbrooke.ca is MCP, MCP-Checker
(score=10, requis 1, UdeS_Bank4, UdeS_Bank5)
May 15 16:58:45 localhost MailScanner[1977]: MCP Checks: Found 1 MCP
messages
May 15 16:58:45 localhost MailScanner[1977]: MCP Actions: message
k4FKwgcD002016 actions are address at gmail.com,forward,deliver
May 15 16:58:45 localhost MailScanner[1977]: Spam Checks: Starting
May 15 16:58:46 localhost MailScanner[1977]: Message k4FKwgcD002016 from
127.0.0.1 (me at usherbrooke.ca) to usherbrooke.ca is n'est pas un
polluriel, SpamAssassin (not cached, score=-1.44, requis 6,
autolearn=not spam, ALL_TRUSTED -1.44
May 15 16:58:46 localhost MailScanner[1977]: Virus and Content Scanning:
Starting
May 15 16:58:46 localhost MailScanner[1977]: Uninfected: Delivered 1
messages
May 15 16:58:46 localhost MailScanner[1977]: Batch (1 message) processed
in 1.48 seconds
May 15 16:58:51 localhost sendmail[2022]: k4FKwgcD002016:
to=<address at gmail.com>, delay=00:00:09, xdelay=00:00:01, mailer=relay,
pri=120444, relay=smtp.usherbrooke.ca. [132.210.244.93], dsn=2.0.0,
stat=Sent (2.0.0 k4FKpUYJ000525 Message accepted for delivery)
You can see the gmail address being forwarded to, but nothing about the
destination address. The MCP line says "actions are
address at gmail.com,forward,deliver". But I see no "deliver".
I'm using the following versions:
Running on
Linux localhost.localdomain 2.6.9-34.EL #1 Fri Feb 24 16:44:51 EST 2006
i686 i686 i386 GNU/Linux
This is Red Hat Enterprise Linux AS release 4 (Nahant Update 3)
This is Perl version 5.008005 (5.8.5)
This is MailScanner version 4.54.2
Module versions are:
1.00 AnyDBM_File
1.14 Archive::Zip
1.03 Carp
1.119 Convert::BinHex
1.00 DirHandle
1.05 Fcntl
2.73 File::Basename
2.08 File::Copy
2.01 FileHandle
1.06 File::Path
0.14 File::Temp
0.78 Filesys::Df
1.35 HTML::Entities
3.54 HTML::Parser
2.37 HTML::TokeParser
1.21 IO
1.10 IO::File
1.123 IO::Pipe
1.71 Mail::Header
3.05 MIME::Base64
5.420 MIME::Decoder
5.420 MIME::Decoder::UU
5.420 MIME::Head
5.420 MIME::Parser
3.03 MIME::QuotedPrint
5.420 MIME::Tools
0.10 Net::CIDR
1.08 POSIX
1.77 Socket
0.08 Sys::Syslog
1.86 Time::HiRes
1.02 Time::localtime
Optional module versions are:
0.17 Convert::TNEF
1.809 DB_File
1.11 DBD::SQLite
1.50 DBI
1.15 Digest
1.01 Digest::HMAC
2.36 Digest::MD5
2.10 Digest::SHA1
0.44 Inline
missing Mail::ClamAV
3.001001 Mail::SpamAssassin
1.999001 Mail::SPF::Query
0.20 Net::CIDR::Lite
0.57 Net::DNS
missing Net::LDAP
1.94 Parse::RecDescent
missing SAVI
1.4 Sys::Hostname::Long
2.56 Test::Harness
0.47 Test::Simple
1.95 Text::Balanced
1.35 URI
Thanks!
Denis
--
_
°v° Denis Beauchemin, analyste
/(_)\ Université de Sherbrooke, S.T.I.
^ ^ T: 819.821.8000x2252 F: 819.821.8045
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3226 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060516/ae8eac2e/smime.bin
More information about the MailScanner
mailing list