MailScanner could not analyze some mails

Pascal Maes pascal.maes at elec.ucl.ac.be
Tue Dec 18 07:37:36 GMT 2007


Le 18-déc.-07 à 03:09, Ugo Bellavance a écrit :

> Hugo van der Kooij wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> Pascal Maes wrote:
>>> Le 13-déc.-07 à 14:33, Ugo Bellavance a écrit :
>>>
>>>> Pascal Maes wrote:
>>>>> Hello,
>>>>> Questions
>>>>> - why that kind of email could no be analyzed ?
>>>>> - Does a workaround exist ?
>>>>> - How can we distribute these kind of emails ?
>>>> Most likely an AV problem, are you using Sophos?
>>>>
>>>> Please have a look at your logs and show us what you find, we'll  
>>>> then
>>>> be able to help you.
>>>>
>>>> Ugo
>>> I have disabled the Virus scanning in MailScanner:
>>>
>>> Virus Scanning = no
>>>
>>> but the message is always put in quarantine :
>>>
>>> Dec 16 08:39:24 smtp-2 postfix/smtpd[13500]: 6F516EC10F:
>>> client=localhost.localdomain[127.0.0.1]
>>> Dec 16 08:39:24 smtp-2 postfix/cleanup[12467]: 6F516EC10F: hold:  
>>> header
>>> Received: from smtp2.sgsi.ucl.ac.be (localhost.localdomain
>>> [127.0.0.1])??by smtp2.sgsi.ucl.ac.be (Postfix) with ESMTP id
>>> 6F516EC10F??for <pascal.maes at uclouvain.be>; Sun, 16 Dec 2007  
>>> 08:39:24
>>> +0100 (CE from localhost.localdomain[127.0.0.1]; from=<>
>>> to=<pascal.maes at uclouvain.be> proto=ESMTP  
>>> helo=<smtp2.sgsi.ucl.ac.be>
>>> Dec 16 08:39:24 smtp-2 postfix/cleanup[12467]: 6F516EC10F:
>>> message-id=<B0078839076 at mail5.e-zone.net>
>>> Dec 16 08:39:24 smtp-2 clamsmtpd: 3E803F: from=<>,
>>> to=pascal.maes at uclouvain.be, status=CLEAN
>>> Dec 16 08:39:26 smtp-2 MailScanner[13754]: Message 6F516EC10F. 
>>> 7E01C from
>>> 127.0.0.1 () to uclouvain.be is n'est pas un polluriel, SpamAssassin
>>> (not cached, score=3.401, requis 5, BAYES_00 -1.60, BOTNET_BADDNS  
>>> 3.00,
>>> BOTNET_SERVERWORDS 1.00, NO_REAL_NAME 1.00)
>>> Dec 16 08:39:26 smtp-2 MailScanner[13754]: Virus and Content  
>>> Scanning:
>>> Starting
>>> Dec 16 08:39:26 smtp-2 MailScanner[13754]: Saved entire message to
>>> /var/spool/MailScanner/quarantine/20071216/6F516EC10F.7E01C
>> Can you translate this message "n'est pas un polluriel" to English?
>
> "Is not spam"
>
> Ugo
>

Right.

In etc/reports/fr/languages.conf

NotSpam = n'est pas un polluriel


Well, for a good syntax it should be

etc/reports/en/langauges.conf: IsNotSpam = is not spam
etc/reports/fr/languages.conf: IsNotSpam = n'est pas un polluriel

but this is not really a problem ;-)

--
Pascal



--
Pascal





More information about the MailScanner mailing list