problem having using french support

Rick Chadderdon mailscanner at yeticomputers.com
Thu Jun 21 19:56:31 IST 2007


It looks as if the file command is picking up something in that message
that matches the magic for one of the many types of executable files. 
Run file against the quarantined text file and see what it comes up
with.  You will occasionally get this kind of false positive with the
content of certain messages.  It should be fairly rare, and shouldn't
need you to do anything to compensate other than explain to your user
what the problem was.  It this is unacceptable, you might want to edit
your magic file to make it less picky about certain kinds of files.

Rick

Administrateur de systemes wrote:
> Hello
>
> I have been using mailscanner since 2003 . I just found out a problem
> using french support
>
> Look at the mail
>
> penguin [~] >mail forget
> Subject: ééééééééééééééééééééééé
>
> .
> Cc:
>
> sent !
>
> Here is the mailscanner log
>
> Jun 21 14:34:35 localhost MailScanner[4553]: New Batch: Scanning 1
> messages, 1103 bytes
> Jun 21 14:34:35 localhost MailScanner[4553]: MCP Checks completed at
> 6570 bytes per second
> Jun 21 14:34:35 localhost MailScanner[4553]: Spam Checks: Starting
> Jun 21 14:34:35 localhost MailScanner[4553]: Message l5LIYYtu005033
> from 132.204.53.116 (faouzi at umontreal.ca) is whitelisted
> Jun 21 14:34:35 localhost MailScanner[4553]: Spam Checks completed at
> 272697 bytes per second
> Jun 21 14:34:35 localhost MailScanner[4553]: Virus and Content
> Scanning: Starting
> Jun 21 14:34:35 localhost MailScanner[4553]: Filename Checks: Allowing
> l5LIYYtu005033 msg-4553-8.txt
> Jun 21 14:34:35 localhost MailScanner[4553]: Filetype Checks: No
> executables (l5LIYYtu005033 msg-4553-8.txt)
> Jun 21 14:34:35 localhost MailScanner[4553]: Other Checks: Found 1
> problems
> Jun 21 14:34:35 localhost MailScanner[4553]: Virus Scanning completed
> at 13681 bytes per second
> Jun 21 14:34:35 localhost MailScanner[4553]: Saved infected
> "msg-4553-8.txt" to
> /opt/MailScanner/var/quarantine/20070621/l5LIYYtu005033
> Jun 21 14:34:35 localhost MailScanner[4553]: Cleaned: Delivered 1
> cleaned messages
>
>
> It is stopping the email !
>
> In my spamassassin i have put in local.cf           ok_locales  fr
> and in my /opt/MailScanner/etc/spam.assassin.prefs.conf  ok_locales  fr
>
> What is wrong ?
>



More information about the MailScanner mailing list