Prombem with rule actions
Julian Field
MailScanner at ecs.soton.ac.uk
Mon Sep 3 19:16:06 IST 2007
Gareth wrote:
> No those directories are not being created. I have lots of directories
> within /var/spool/mailscanner/quaranteen/20070803 with names like
> DF142AA0092.E2D31 containing the virus quaranteened files bo no directories
> like nonspam.
>
> Are the virus quaranteened files being saved in the correct place or are
> they wrong aswell?
>
They are right.
> I cant figure out why the files are not being saved.
>
Add "store" to your non-spam actions or SpamAssassin Rule Actions so you
should start generating lots of files straightaway. If it doesn't create
the 'spam' directory then try creating it by hand to see if it starts
using it, and the problem is just creating it.
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Julian
>> Field
>> Sent: 03 September 2007 18:56
>> To: MailScanner discussion
>> Subject: Re: Prombem with rule actions
>>
>>
>> In directories such as "spam" in there.
>> /var/spool/MailScanner/quarantine/20070903/nonspam/
>>
>> Gareth wrote:
>>
>>> Understood but where are these quarantines?
>>>
>>> I have /var/spool/mailscanner/quaranteen which contains directories like
>>> 20070803 and within that directories named according to the
>>>
>> mail ID with the
>>
>>> message and any attachments within it.
>>>
>>> Where do each of these store options actually try to save the files?
>>>
>>>
>>>
>>>> -----Original Message-----
>>>> From: mailscanner-bounces at lists.mailscanner.info
>>>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Julian
>>>> Field
>>>> Sent: 03 September 2007 18:16
>>>> To: MailScanner discussion
>>>> Subject: Re: Prombem with rule actions
>>>>
>>>>
>>>> # store - store the message in the (spam)
>>>>
>> quarantine
>>
>>>> # store-nonmcp - store the message in the
>>>>
>> non-MCP quarantine
>>
>>>> # store-mcp - store the message in the MCP quarantine
>>>> # store-nonspam - store the message in the non-spam
>>>> quarantine
>>>> # store-spam - store the message in the spam quarantine
>>>>
>>>> Straight out of MailScanner.conf.
>>>>
>>>> Gareth wrote:
>>>>
>>>>
>>>>> Any idea on this?
>>>>>
>>>>> I tried searching for where the 'store' option might be
>>>>>
>> saving the files
>>
>>>>> instead but I could not find anything. What option would I need
>>>>>
>>>>>
>>>> to specify
>>>>
>>>>
>>>>> in order for them to be saved in the same place as quaranteened
>>>>>
>>>>>
>>>> viruses and
>>>>
>>>>
>>>>> blocked attachments?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> -----Original Message-----
>>>>>> From: mailscanner-bounces at lists.mailscanner.info
>>>>>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf
>>>>>>
>> Of Gareth
>>
>>>>>> Sent: 03 September 2007 12:40
>>>>>> To: MailScanner discussion
>>>>>> Subject: Re: Prombem with rule actions
>>>>>>
>>>>>>
>>>>>> On Mon, 2007-09-03 at 12:32, Julian Field wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>>>>> Hash: SHA1
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Gareth wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> I have just upgraded and have set the following in the
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> configuration :-
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> SpamAssassin Rule Actions = SpamScore>=25=>store,non-deliver
>>>>>>>>
>>>>>>>> It correctly does not deliver the mail but it does not seem to be
>>>>>>>> putting it in the quaranteen directory. I would like it to
>>>>>>>>
>> quaranteen
>>
>>>>>>>> the mail in the same way that it does a virus so that it
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> shows up in the
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> quaranteen when I use mailscanner.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>> It should go in the spam quarantine. Have you checked there?
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> Where is that?
>>>>>>
>>>>>> I would like it put in
>>>>>>
>> /var/spool/MailScanner/quarantine/yymmdd/ which
>>
>>>>>> is where the viruses and other blocked messages are stored.
>>>>>>
>>>>>> The problem I am having is that if there is a virus with a high score
>>>>>> then it gets put somewhere else and mailwatch cannot show me
>>>>>>
>>>>>>
>>>> the headers
>>>>
>>>>
>>>>>> or even show what virus it was infected with.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> Have I made a mistake with the syntax or it is saving the
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>> file somewhere
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> else?
>>>>>>>>
>>>>>>>> Thanks
>>>>>>>> Gareth
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>> Jules
>>>>>>>
>>>>>>> - --
>>>>>>> Julian Field MEng CITP
>>>>>>> www.MailScanner.info
>>>>>>> Buy the MailScanner book at www.MailScanner.info/store
>>>>>>>
>>>>>>> Need help customising MailScanner?
>>>>>>> Contact me!
>>>>>>> Need help fixing or optimising your systems?
>>>>>>> Contact me!
>>>>>>> Need help getting you started solving new requirements from
>>>>>>>
>> your boss?
>>
>>>>>>> Contact me!
>>>>>>>
>>>>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>>>>
>>>>>>>
>>>>>>> -----BEGIN PGP SIGNATURE-----
>>>>>>> Version: PGP Desktop 9.6.3 (Build 3017)
>>>>>>> Comment: (pgp-secured)
>>>>>>> Charset: ISO-8859-1
>>>>>>>
>>>>>>> wj8DBQFG2/DfEfZZRxQVtlQRAh/0AKCY3rh9qdRCItaWif0YafKbbVmwLACgkkJB
>>>>>>> ceG7/KnEo/F74nQTHVXe1zA=
>>>>>>> =YsDX
>>>>>>> -----END PGP SIGNATURE-----
>>>>>>>
>>>>>>> --
>>>>>>> This message has been scanned for viruses and
>>>>>>> dangerous content by MailScanner, and is
>>>>>>> believed to be clean.
>>>>>>> For all your IT requirements visit www.transtec.co.uk
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> --
>>>>>> MailScanner mailing list
>>>>>> mailscanner at lists.mailscanner.info
>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>>
>>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>>
>>>>>> Support MailScanner development - buy the book off the website!
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>> Jules
>>>>
>>>> --
>>>> Julian Field MEng CITP
>>>> www.MailScanner.info
>>>> Buy the MailScanner book at www.MailScanner.info/store
>>>>
>>>> MailScanner customisation, or any advanced system administration help?
>>>> Contact me at Jules at Jules.FM
>>>>
>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>> For all your IT requirements visit www.transtec.co.uk
>>>>
>>>>
>>>> --
>>>> This message has been scanned for viruses and
>>>> dangerous content by MailScanner, and is
>>>> believed to be clean.
>>>> For all your IT requirements visit www.transtec.co.uk
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>> Jules
>>
>> --
>> Julian Field MEng CITP
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>>
>> MailScanner customisation, or any advanced system administration help?
>> Contact me at Jules at Jules.FM
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>> For all your IT requirements visit www.transtec.co.uk
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>> For all your IT requirements visit www.transtec.co.uk
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>>
>
>
Jules
--
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk
More information about the MailScanner
mailing list