Problems with MCP (can't find EOCD signature)

[Dhawal Doshy]

Simon Annetts wrote:
> Hi
> I've just got mailscanner 4.54.4 working and I am trying to get mcp to work.
>  
> I'm using it with exim with two queues and two configs.
> All works fine for virus and spam scanning.
> However now mcp is enabled if a profane email arrives and is caught by 
> mcp it never reaches the exim out queue it just disappears into a black 
> hole.

The EOCD error is a harmless one and can be safely ignored.. as for the 
MCP thing a few days back it was suggested to use this:

First Check = spam

HTH,
- dhawal

> spamassassin -C ./mcp.spam.assassin.prefs.conf --lint
> shows no errors
> 
> maillog shows the message being correctly detected:
> 
> May 24 19:30:11 mailhub1 MailScanner[30746]: New Batch: Scanning 1 messages, 1054 bytes
> May 24 19:30:11 mailhub1 MailScanner[30746]: MCP Checks: Starting
> May 24 19:30:12 mailhub1 MailScanner[30746]: Message 1Fiy7X-00082t-0U from 10.4.4.20 (simon at ateb.co.uk) to marteg.com is MCP,
> ecker (score=10, required 1, PROFANITY2 10.00)
> May 24 19:30:12 mailhub1 MailScanner[30746]: MCP Checks: Found 1 MCP messages
> May 24 19:30:12 mailhub1 MailScanner[30746]: MCP Actions: message 1Fiy7X-00082t-0U actions are deliver
> May 24 19:30:12 mailhub1 MailScanner[30746]: Spam Checks: Starting
> May 24 19:30:19 mailhub1 MailScanner[30746]: Virus and Content Scanning: Starting
> May 24 19:30:21 mailhub1 MailScanner[30746]: Uninfected: Delivered 1 messages
> May 24 19:30:21 mailhub1 MailScanner[30746]: Batch (1 message) processed in 9.55 seconds
> 
> but exim main.log just shows:
> 
> 2006-05-24 19:30:11 1Fiy7X-00082t-0U <= simon at ateb.co.uk H=purple.marteg.com (purple) [10.4.4.20] P=smtp S=718 id=025101c67f4
> a70$1404040a at purple
> 2006-05-24 19:30:21 1Fiy7X-00082t-0U Completed
> 
> instead of the usual in <= and out => parts of the message delivery.
> 
> There is nothing in quarantine.
> 
> I've done a find / -name "1Fiy7X-00082t-0U*" and the message is nowhere 
> on the disk!
> If I run mailscanner in debug mode I get the following excerpt which 
> seems to indicate the mcp check died with the error 'format error: can't 
> find EOCD signature'
>  
> What does this mean and how do I fix it??
> 
> [23556] dbg: message: decoding other encoding type (7bit), ignoring
> [23556] dbg: check: running tests for priority: 0
> [23556] dbg: rules: running header regexp tests; score so far=0
> [23556] dbg: rules: running body-text per-line regexp tests; score so far=0
> [23556] dbg: rules: ran body rule PROFANITY2 ======> got hit: "w*nk"
> [23556] dbg: uri: running uri tests; score so far=10
> [23556] dbg: rules: running raw-body-text per-line regexp tests; score so far=10
> [23556] dbg: rules: running full-text regexp tests; score so far=10
> [23556] dbg: check: is spam? score=10 required=5
> [23556] dbg: check: tests=PROFANITY2
> [23556] dbg: check: subtests=
> Ignore errors about failing to find EOCD signature
> format error: can't find EOCD signature
>  at /usr/sbin/MailScanner line 781
> Stopping now as you are debugging me.
>                                                            [  OK  ]
> 
>  
> Thanks in advance
> Simon
>  
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>