MCP broken?

Denis Beauchemin Denis.Beauchemin at USherbrooke.ca
Tue May 16 14:10:26 IST 2006


Hello again,

After experimenting with MCP on a test system I come to the conclusion 
that something is not working as it should:
Non MCP Actions = deliver
MCP Actions = deliver forward address at gmail.com
High Scoring MCP Actions = deliver forward address at gmail.com

Now I send an email that triggers enough MCP rules to match one of the 
last 2 rules.  The email gets sent OK to the forward address but is not 
delivered to the recipient.  Why?

Here are the maillog messages:
May 15 16:57:55 localhost MailScanner[1885]: MailScanner child caught a 
SIGHUP
May 15 16:57:55 localhost MailScanner[1977]: MailScanner E-Mail Virus 
Scanner version 4.54.2 starting...
May 15 16:57:55 localhost MailScanner[1977]: Read 718 hostnames from the 
phishing whitelist
May 15 16:57:56 localhost MailScanner[1977]: Using SpamAssassin results 
cache
May 15 16:57:56 localhost MailScanner[1977]: Connected to SpamAssassin 
cache database
May 15 16:57:56 localhost MailScanner[1977]: Enabling SpamAssassin 
auto-whitelist functionality...
May 15 16:57:56 localhost MailScanner[1977]: I have found  scanners 
installed, and will use them all by default.
May 15 16:57:56 localhost MailScanner[1977]: You appear to have no virus 
scanners installed at all! This is not good. If you have installed any, 
then check your virus.scanners.conf file to make sure the locations of 
your scanners are correct
May 15 16:57:56 localhost MailScanner[1977]: Using locktype = flock
May 15 16:58:42 localhost sendmail[2016]: k4FKwgcD002016: 
from=<me at USherbrooke.ca>, size=444, class=0, nrcpts= 1, 
msgid=<4468EB82.5000302 at USherbrooke.ca>, proto=ESMTP, daemon=MTA, 
relay=localhost.localdomain [127.0.0.1]
May 15 16:58:42 localhost sendmail[2016]: k4FKwgcD002016: 
to=<me at USherbrooke.ca>, delay=00:00:00, mailer=relay, pri=30444, stat=queued
May 15 16:58:45 localhost MailScanner[1977]: New Batch: Scanning 1 
messages, 946 bytes
May 15 16:58:45 localhost MailScanner[1977]: MCP Checks: Starting
May 15 16:58:45 localhost MailScanner[1977]: Message k4FKwgcD002016 from 
127.0.0.1 (me at usherbrooke.ca) to usherbrooke.ca is MCP, MCP-Checker 
(score=10, requis 1, UdeS_Bank4, UdeS_Bank5)
May 15 16:58:45 localhost MailScanner[1977]: MCP Checks: Found 1 MCP 
messages
May 15 16:58:45 localhost MailScanner[1977]: MCP Actions: message 
k4FKwgcD002016 actions are address at gmail.com,forward,deliver
May 15 16:58:45 localhost MailScanner[1977]: Spam Checks: Starting
May 15 16:58:46 localhost MailScanner[1977]: Message k4FKwgcD002016 from 
127.0.0.1 (me at usherbrooke.ca) to usherbrooke.ca is n'est pas un 
polluriel, SpamAssassin (not cached, score=-1.44, requis 6, 
autolearn=not spam, ALL_TRUSTED -1.44
May 15 16:58:46 localhost MailScanner[1977]: Virus and Content Scanning: 
Starting
May 15 16:58:46 localhost MailScanner[1977]: Uninfected: Delivered 1 
messages
May 15 16:58:46 localhost MailScanner[1977]: Batch (1 message) processed 
in 1.48 seconds
May 15 16:58:51 localhost sendmail[2022]: k4FKwgcD002016: 
to=<address at gmail.com>, delay=00:00:09, xdelay=00:00:01, mailer=relay, 
pri=120444, relay=smtp.usherbrooke.ca. [132.210.244.93], dsn=2.0.0, 
stat=Sent (2.0.0 k4FKpUYJ000525 Message accepted for delivery)

You can see the gmail address being forwarded to, but nothing about the 
destination address.  The MCP line says "actions are 
address at gmail.com,forward,deliver".  But I see no "deliver".

I'm using the following versions:
Running on
Linux localhost.localdomain 2.6.9-34.EL #1 Fri Feb 24 16:44:51 EST 2006 
i686 i686 i386 GNU/Linux
This is Red Hat Enterprise Linux AS release 4 (Nahant Update 3)
This is Perl version 5.008005 (5.8.5)

This is MailScanner version 4.54.2
Module versions are:
1.00    AnyDBM_File
1.14    Archive::Zip
1.03    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.05    Fcntl
2.73    File::Basename
2.08    File::Copy
2.01    FileHandle
1.06    File::Path
0.14    File::Temp
0.78    Filesys::Df
1.35    HTML::Entities
3.54    HTML::Parser
2.37    HTML::TokeParser
1.21    IO
1.10    IO::File
1.123   IO::Pipe
1.71    Mail::Header
3.05    MIME::Base64
5.420   MIME::Decoder
5.420   MIME::Decoder::UU
5.420   MIME::Head
5.420   MIME::Parser
3.03    MIME::QuotedPrint
5.420   MIME::Tools
0.10    Net::CIDR
1.08    POSIX
1.77    Socket
0.08    Sys::Syslog
1.86    Time::HiRes
1.02    Time::localtime

Optional module versions are:
0.17    Convert::TNEF
1.809   DB_File
1.11    DBD::SQLite
1.50    DBI
1.15    Digest
1.01    Digest::HMAC
2.36    Digest::MD5
2.10    Digest::SHA1
0.44    Inline
missing Mail::ClamAV
3.001001        Mail::SpamAssassin
1.999001        Mail::SPF::Query
0.20    Net::CIDR::Lite
0.57    Net::DNS
missing Net::LDAP
1.94    Parse::RecDescent
missing SAVI
1.4     Sys::Hostname::Long
2.56    Test::Harness
0.47    Test::Simple
1.95    Text::Balanced
1.35    URI

Thanks!

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3226 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060516/ae8eac2e/smime.bin


More information about the MailScanner mailing list