MCP problem

Phil viralert at fadalto.com
Tue Aug 28 08:47:12 IST 2007


Hi all, 

I hope you could give me magic hints.. I've a trouble that reduce me to tears :)

First of all, 

on a Fedora Core 6 machine, I'm using MailScanner-4.62.9-3. 

I have enabled MCP check as for previous version, but I'm not receiving the mcp mail 
that has been catched. 


My configuration file is: 

Non MCP Actions = deliver 
MCP Actions = store attachment forward spammy at yatta-it.com 
High Scoring MCP Actions = store forward spammy at yatta-it.com 
Bounce MCP As Attachment = no 



My mail log file says: 

Aug 24 10:41:50 tommy sendmail[13040]: l7O8fmQ3013040: from=<root at dario.yatta-it.com>, 
size=871, class=0, nrcpts=1, msgid=<200708240841.l7O8fW1r032052 at dario.yatta-it.com>, 
proto=ESMTP, daemon=MTA, relay=217-133-242-204.b2b.tiscali.it [217.133.242.204] 
Aug 24 10:41:53 tommy MailScanner[12961]: New Batch: Scanning 1 messages, 1457 bytes 
Aug 24 10:41:53 tommy MailScanner[12961]: MCP Checks: Starting 
Aug 24 10:41:54 tommy MailScanner[12961]: Message l7O8fmQ3013040 from 217.133.242.204 
(root at dario.yatta-it.com) to fdini.com is MCP, MCP-Checker (score=4, required 1, RULE1 
4.00) 
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Checks: Found 1 MCP messages 
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Actions: message l7O8fmQ3013040 actions 
are spammy at yatta-it.com,store,forward 
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Checks completed at 2544 bytes per second 
Aug 24 10:41:54 tommy MailScanner[12961]: Spam Checks: Starting 
Aug 24 10:42:11 tommy MailScanner[12961]: Spam Checks completed at 87 bytes per second 
Aug 24 10:42:11 tommy MailScanner[12961]: Virus and Content Scanning: Starting 
Aug 24 10:42:11 tommy MailScanner[12961]: Virus Scanning completed at 3874 bytes per 
second 
Aug 24 10:42:11 tommy MailScanner[12961]: Virus Processing completed at 1457 bytes per 
second 
Aug 24 10:42:11 tommy MailScanner[12961]: Disinfection completed at 1457 bytes per 
second 
Aug 24 10:42:11 tommy MailScanner[12961]: Batch completed at 82 bytes per second (1457 
/ 17) 
Aug 24 10:42:11 tommy MailScanner[12961]: Batch (1 message) processed in 17.64 seconds 
Aug 24 10:42:11 tommy MailScanner[12961]: Logging message l7O8fmQ3013040 to SQL 
Aug 24 10:42:11 tommy MailScanner[12961]: "Always Looked Up Last" took 0.00 seconds 
Aug 24 10:42:11 tommy MailScanner[12967]: l7O8fmQ3013040: Logged to MailWatch SQL 



For spam the behaviour of the new version of MailScanner is equal to the old one: 

Aug 24 10:45:03 tommy sendmail[13416]: l7O8j2So013416: from=<Grissomofncv at timweld.com>, 
size=766, class=0, nrcpts=1, msgid=<000e01c7e62b$0d4dc050$5a615558 at ws05>, proto=ESMTP, 
daemon=MTA, relay=[88.85.97.90] 
Aug 24 10:45:04 tommy MailScanner[13332]: New Batch: Scanning 1 messages, 1206 bytes 
Aug 24 10:45:04 tommy MailScanner[13332]: MCP Checks: Starting 
Aug 24 10:45:05 tommy MailScanner[13332]: MCP Checks completed at 5063 bytes per second 
Aug 24 10:45:05 tommy MailScanner[13332]: Spam Checks: Starting 
Aug 24 10:45:15 tommy MailScanner[13332]: RBL checks: l7O8j2So013416 found in SBL+XBL 
Aug 24 10:45:24 tommy MailScanner[13332]: Message l7O8j2So013416 from 88.85.97.90 
(grissomofncv at timweld.com) to omissis.com is spam, SBL+XBL, SpamAssassin (not cached, 
score=12.044, required 4, BAYES_60 1.00, DK_POLICY_SIGNSOME 0.00, JM_TORA_XM 2.41, 
RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E8_51_100 1.50, RAZOR2_CHECK 0.50, 
RCVD_IN_XBL 3.03, RDNS_NONE 0.10, URIBL_BLACK 3.00) 
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Checks: Found 1 spam messages 
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Actions: message l7O8j2So013416 actions 
are attachment,spammy at yatta-it.com,store,forward 
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Checks completed at 63 bytes per second 
Aug 24 10:45:24 tommy MailScanner[13332]: Virus and Content Scanning: Starting 
Aug 24 10:45:24 tommy MailScanner[13332]: Virus Scanning completed at 3189 bytes per 
second 
Aug 24 10:45:24 tommy MailScanner[13332]: Uninfected: Delivered 1 messages 
Aug 24 10:45:24 tommy MailScanner[13332]: Virus Processing completed at 1206 bytes per 
second 
Aug 24 10:45:24 tommy MailScanner[13332]: Batch completed at 62 bytes per second (1206 
/ 19) 
Aug 24 10:45:24 tommy MailScanner[13332]: Batch (1 message) processed in 19.44 seconds 
Aug 24 10:45:24 tommy MailScanner[13332]: Logging message l7O8j2So013416 to SQL 
Aug 24 10:45:24 tommy MailScanner[13332]: "Always Looked Up Last" took 0.00 seconds 
Aug 24 10:45:24 tommy MailScanner[13337]: l7O8j2So013416: Logged to MailWatch SQL 
Aug 24 10:45:24 tommy sendmail[13432]: l7O8j2So013416: to=<spammy at yatta-it.com>, 
delay=00:00:21, xdelay=00:00:00, mailer=local, pri=120766, dsn=2.0.0, stat=Sent 



As you can see the first log misses the line 
Aug 24 10:45:24 tommy sendmail[13432]: l7O8j2So013416: to=<spammy at yatta-it.com>, 
delay=00:00:21, xdelay=00:00:00, mailer=local, pri=120766, dsn=2.0.0, stat=Sent 


I cannot find the message in the queue folder... it disappears :(

Any hint? 

Thanks to all! 

Phil



More information about the MailScanner mailing list