MCP problem
Phil
viralert at fadalto.com
Tue Aug 28 08:47:12 IST 2007
Hi all,
I hope you could give me magic hints.. I've a trouble that reduce me to tears :)
First of all,
on a Fedora Core 6 machine, I'm using MailScanner-4.62.9-3.
I have enabled MCP check as for previous version, but I'm not receiving the mcp mail
that has been catched.
My configuration file is:
Non MCP Actions = deliver
MCP Actions = store attachment forward spammy at yatta-it.com
High Scoring MCP Actions = store forward spammy at yatta-it.com
Bounce MCP As Attachment = no
My mail log file says:
Aug 24 10:41:50 tommy sendmail[13040]: l7O8fmQ3013040: from=<root at dario.yatta-it.com>,
size=871, class=0, nrcpts=1, msgid=<200708240841.l7O8fW1r032052 at dario.yatta-it.com>,
proto=ESMTP, daemon=MTA, relay=217-133-242-204.b2b.tiscali.it [217.133.242.204]
Aug 24 10:41:53 tommy MailScanner[12961]: New Batch: Scanning 1 messages, 1457 bytes
Aug 24 10:41:53 tommy MailScanner[12961]: MCP Checks: Starting
Aug 24 10:41:54 tommy MailScanner[12961]: Message l7O8fmQ3013040 from 217.133.242.204
(root at dario.yatta-it.com) to fdini.com is MCP, MCP-Checker (score=4, required 1, RULE1
4.00)
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Checks: Found 1 MCP messages
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Actions: message l7O8fmQ3013040 actions
are spammy at yatta-it.com,store,forward
Aug 24 10:41:54 tommy MailScanner[12961]: MCP Checks completed at 2544 bytes per second
Aug 24 10:41:54 tommy MailScanner[12961]: Spam Checks: Starting
Aug 24 10:42:11 tommy MailScanner[12961]: Spam Checks completed at 87 bytes per second
Aug 24 10:42:11 tommy MailScanner[12961]: Virus and Content Scanning: Starting
Aug 24 10:42:11 tommy MailScanner[12961]: Virus Scanning completed at 3874 bytes per
second
Aug 24 10:42:11 tommy MailScanner[12961]: Virus Processing completed at 1457 bytes per
second
Aug 24 10:42:11 tommy MailScanner[12961]: Disinfection completed at 1457 bytes per
second
Aug 24 10:42:11 tommy MailScanner[12961]: Batch completed at 82 bytes per second (1457
/ 17)
Aug 24 10:42:11 tommy MailScanner[12961]: Batch (1 message) processed in 17.64 seconds
Aug 24 10:42:11 tommy MailScanner[12961]: Logging message l7O8fmQ3013040 to SQL
Aug 24 10:42:11 tommy MailScanner[12961]: "Always Looked Up Last" took 0.00 seconds
Aug 24 10:42:11 tommy MailScanner[12967]: l7O8fmQ3013040: Logged to MailWatch SQL
For spam the behaviour of the new version of MailScanner is equal to the old one:
Aug 24 10:45:03 tommy sendmail[13416]: l7O8j2So013416: from=<Grissomofncv at timweld.com>,
size=766, class=0, nrcpts=1, msgid=<000e01c7e62b$0d4dc050$5a615558 at ws05>, proto=ESMTP,
daemon=MTA, relay=[88.85.97.90]
Aug 24 10:45:04 tommy MailScanner[13332]: New Batch: Scanning 1 messages, 1206 bytes
Aug 24 10:45:04 tommy MailScanner[13332]: MCP Checks: Starting
Aug 24 10:45:05 tommy MailScanner[13332]: MCP Checks completed at 5063 bytes per second
Aug 24 10:45:05 tommy MailScanner[13332]: Spam Checks: Starting
Aug 24 10:45:15 tommy MailScanner[13332]: RBL checks: l7O8j2So013416 found in SBL+XBL
Aug 24 10:45:24 tommy MailScanner[13332]: Message l7O8j2So013416 from 88.85.97.90
(grissomofncv at timweld.com) to omissis.com is spam, SBL+XBL, SpamAssassin (not cached,
score=12.044, required 4, BAYES_60 1.00, DK_POLICY_SIGNSOME 0.00, JM_TORA_XM 2.41,
RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E8_51_100 1.50, RAZOR2_CHECK 0.50,
RCVD_IN_XBL 3.03, RDNS_NONE 0.10, URIBL_BLACK 3.00)
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Checks: Found 1 spam messages
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Actions: message l7O8j2So013416 actions
are attachment,spammy at yatta-it.com,store,forward
Aug 24 10:45:24 tommy MailScanner[13332]: Spam Checks completed at 63 bytes per second
Aug 24 10:45:24 tommy MailScanner[13332]: Virus and Content Scanning: Starting
Aug 24 10:45:24 tommy MailScanner[13332]: Virus Scanning completed at 3189 bytes per
second
Aug 24 10:45:24 tommy MailScanner[13332]: Uninfected: Delivered 1 messages
Aug 24 10:45:24 tommy MailScanner[13332]: Virus Processing completed at 1206 bytes per
second
Aug 24 10:45:24 tommy MailScanner[13332]: Batch completed at 62 bytes per second (1206
/ 19)
Aug 24 10:45:24 tommy MailScanner[13332]: Batch (1 message) processed in 19.44 seconds
Aug 24 10:45:24 tommy MailScanner[13332]: Logging message l7O8j2So013416 to SQL
Aug 24 10:45:24 tommy MailScanner[13332]: "Always Looked Up Last" took 0.00 seconds
Aug 24 10:45:24 tommy MailScanner[13337]: l7O8j2So013416: Logged to MailWatch SQL
Aug 24 10:45:24 tommy sendmail[13432]: l7O8j2So013416: to=<spammy at yatta-it.com>,
delay=00:00:21, xdelay=00:00:00, mailer=local, pri=120766, dsn=2.0.0, stat=Sent
As you can see the first log misses the line
Aug 24 10:45:24 tommy sendmail[13432]: l7O8j2So013416: to=<spammy at yatta-it.com>,
delay=00:00:21, xdelay=00:00:00, mailer=local, pri=120766, dsn=2.0.0, stat=Sent
I cannot find the message in the queue folder... it disappears :(
Any hint?
Thanks to all!
Phil
More information about the MailScanner
mailing list