MCP Issue

[Desai, Jason]

> I'm running MS v 4.56.6 and just noticed a strange error 
> today. I have MCP setup to catch a few derogotary terms. More 
> for testing purposes then actually use. It rarely gets any 
> hits. But today it is consistently hitting one person. The 
> funny thing it is matching on rules in the spam rules and not 
> the MCP rules. The last message had the following from 
> MailWatch for Spam:
[snip]
> In the MCP section:
> 
> MCP Score:	 4.61	 
> MCP Report:	 Score	 Matching Rule	 Description	 
> 	ALL_TRUSTED	  	 
> 	FORGED_OUTLOOK_HTML	  	 
> 	FORGED_OUTLOOK_TAGS	  	 
> 	HTML_MESSAGE	  	 
> 	MIME_HTML_ONLY	  	 
> 	SUBJ_ALL_CAPS	 
> 
> I'm confused how the MCP section is suddenly matching my SA 
> rules instead of the ones I created for MCP?

I came across the same thing today.  I think it has to do with sa-update
and SpamAssassin Local State Dir setting.  I did not have this problem
until I ran sa-update.

Running in debug mode, in the MCP section I see:

[snip]
[26038] dbg: config: using "/opt/MailScanner/etc/mcp" for site rules pre
files
[26038] dbg: config: using "/var/lib/spamassassin/3.001007" for sys
rules pre files
[26038] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org.pre
[26038] dbg: config: using "/var/lib/spamassassin/3.001007" for default
rules dir
[26038] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org.cf
[26038] dbg: config: using "/opt/MailScanner/etc/mcp" for site rules dir
[26038] dbg: config: read file /opt/MailScanner/etc/mcp/10_example.cf
[26038] dbg: config: using
"/opt/MailScanner/etc/mcp/mcp.spam.assassin.prefs.conf" for user prefs
file
[26038] dbg: config: read file
/opt/MailScanner/etc/mcp/mcp.spam.assassin.prefs.conf
[26038] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/empty.pre
[snip]

So it looks like the MCP SpamAssassin run is pulling rules from the
sa-update rules.

Julian, should there be a "MCP SpamAssassin Local State Dir" setting so
that we can disable this, or force it to another directory?  Or is there
another work around?

For the time being, I have renamed /var/lib/spamassassin/3.001007 and
stopped running sa-update.

Jase