Message never gets out of mqueue.in

[Richard Bollinger]

Running MailScanner-4.57.6, recently upgraded from ancient version 4.21-9.

Also just upgraded from SpamAssassin  2.63 to 3.1.7 with the latest
image spam detection gadgets.

All working nicely, except certain messages get reprocessed infinitely
until I manually move them from mqueue.in to mqueue or if I whitelist
the sender.  File sizes:

-rw-------    1 root     25        1412851 Feb  7 06:51 dfl17Bo8oL007167
-rw-------    1 root     25           1978 Feb  7 06:51 qfl17Bo8oL007167

Partial message headers:

This is a multi-part message in MIME format.

--=_Boundary_vtyTzqRBAvaD1M8pLSjI
Content-Type: message/rfc822
Content-Disposition: attachment;
        filename=originalmail.eml

Received: from zzz ([a.b.c.d])by x.com
        (8.12.8/8.12.8) with SMTP id l17B1k0i009927;Wed, 7 Feb 2007 16:31:47 +05
30
From:
To:
Subject:
Date: Wed, 7 Feb 2007 16:37:36 +0530
Message-ID: <LAEDIAEAJFAPPEBEBGIOIEOKCDAA>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0027_01C74AD6.4639D340"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-MS-TNEF-Correlator: <LAEDIAEAJFAPPEBEBGIOIEOKCDAA>
X-imss-version: 2.046
X-imss-result: Passed
X-imss-scores: Clean:99.90000 C:2 M:3 S:5 R:5
X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

This is a multi-part message in MIME format.

------=_NextPart_000_0027_01C74AD6.4639D340
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

...

------=_NextPart_000_0027_01C74AD6.4639D340
Content-Type: application/ms-tnef;
        name="winmail.dat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
        filename="winmail.dat"


I thought perhaps there was a problem with TNEF decoding, so I tried
changing to the Internal decoder.. but that didn't help.

/var/adm/messages indicates that it gets most of the way through
processing, but the files never get moved or sent.

You'll see that one batch works on it... then another does it all
over... and so on...

Feb  7 06:51:49 mail sendmail[7167]: l17Bo8oL007167: from=<xx>,
size=1414089, class=0, nrcpts=2, msgid=<LAEDIAEAJFAPPEBEBGIOIEOKCDAA>,
proto=ESMTP, daemon=MTA, relay=[]
Feb  7 06:51:53 mail MailScanner[31038]: Message l17Bo8oL007167 from
(i at in) to elliott-turbo.com is not spam, SpamAssassin (score=-1.398,
required 5, BAYES_00 -2.60, SARE_BIZOP 0.70, UNPARSEABLE_RELAY 0.00,
WATCH_STORE 0.50)
Feb  7 06:51:53 mail MailScanner[31038]: Expanding TNEF archive at
/usr/local/MailScanner-4.57.6/var/incoming/31038/l17Bo8oL007167/winmail.dat
Feb  7 06:51:53 mail MailScanner[31038]: Message l17Bo8oL007167 added
TNEF contents msg-31038-2891.txt,msg-31038-2901.txt,Untitled Attac,PBU
Rev1 1 Feb.xls,LOS_pdf1
Feb  7 06:51:53 mail MailScanner[31038]: Message l17Bo8oL007167 has
had TNEF winmail.dat removed
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 msg-31038-289.txt
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 msg-31038-290.txt
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 Untitled Attachment (no rule matched)
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 PBU Rev1 1 Feb,2007.xls (no rule matched)
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 LOS_pdf1 (no rule matched)
Feb  7 06:52:15 mail MailScanner[31038]: Filename Checks: Allowing
l17Bo8oL007167 msg-31038-291.txt
Feb  7 06:52:15 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 PBU Rev1 1 Feb,2007.xls (no match found)
Feb  7 06:52:15 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 Untitled Attachment (no match found)
Feb  7 06:52:15 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 msg-31038-291.txt
Feb  7 06:52:15 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 LOS_pdf1 (no match found)
Feb  7 06:52:16 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 msg-31038-289.txt
Feb  7 06:52:16 mail MailScanner[31038]: Filetype Checks: Allowing
l17Bo8oL007167 msg-31038-290.txt
Feb  7 06:52:18 mail MailScanner[30832]: Message l17Bo8oL007167 from
(in) to elliott-turbo.com is not spam, SpamAssassin (score=-1.398,
required 5, BAYES_00 -2.60, SARE_BIZOP 0.70, UNPARSEABLE_RELAY 0.00,
WATCH_STORE 0.50)
Feb  7 06:52:24 mail MailScanner[30832]: Expanding TNEF archive at
/usr/local/MailScanner-4.57.6/var/incoming/30832/l17Bo8oL007167/winmail.dat
Feb  7 06:52:24 mail MailScanner[30832]: Message l17Bo8oL007167 added
TNEF contents msg-30832-3431.txt,msg-30832-3441.txt,Untitled Attac,PBU
Rev1 1 Feb.xls,LOS_pdf1
Feb  7 06:52:24 mail MailScanner[30832]: Message l17Bo8oL007167 has
had TNEF winmail.dat removed
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 msg-30832-343.txt
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 msg-30832-344.txt
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 Untitled Attachment (no rule matched)
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 PBU Rev1 1 Feb,2007.xls (no rule matched)
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 LOS_pdf1 (no rule matched)
Feb  7 06:52:54 mail MailScanner[30832]: Filename Checks: Allowing
l17Bo8oL007167 msg-30832-345.txt
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 PBU Rev1 1 Feb,2007.xls (no match found)
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 Untitled Attachment (no match found)
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 msg-30832-344.txt
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 LOS_pdf1 (no match found)
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 msg-30832-343.txt
Feb  7 06:52:54 mail MailScanner[30832]: Filetype Checks: Allowing
l17Bo8oL007167 msg-30832-345.txt

Any ideas?

Thanks, Rich Bollinger