Prombem with rule actions

Julian Field MailScanner at ecs.soton.ac.uk
Tue Sep 4 19:30:40 IST 2007



Gareth wrote:
> Jules, Could this be a bug?
>
> As it works when I put the store option in the high scoring rules but wont
> work as part of a rules actions line I cant think of any cause other that a
> problem with the rule actioon line itself or a bug somewhere.
>   
I have this lot set:

Required SpamAssassin Score = 6
Non Spam Actions = deliver header "X-Spam-Status: No"
Spam Actions = deliver header "X-Spam-Status: Yes"
High Scoring Spam Actions = deliver header "X-Spam-Status: Yes"

SpamAssassin Rule Actions = FROM_BOSS_WIFE=>forward 
secretary at domain.com, SpamScore>=6=>forward 
spam.score at greater6.com,store,non-deliver, SpamScore<100=>store,forward 
spam.score at less100.com, store, SpamScore>100=>deliver,store

And I get everything stored in the "nonspam" archive.

So it appears to work for me. So I don't quite see why it doesn't for 
you. It sets all the spam actions first, long before it does anything 
about them. So it shouldn't be possible for the action to work in one 
setting and not in another.
>
>   
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Gareth
>> Sent: 04 September 2007 13:37
>> To: MailScanner discussion
>> Subject: Re: Prombem with rule actions
>>
>>
>> I tried the following aswell as an alternative and it didn't store the
>> message either.
>>
>> SpamAssassin Rule Actions = BAYES_99=>store,non-deliver
>>
>> On Tue, 2007-09-04 at 12:22, Gareth wrote:
>>     
>>> Thanks for that. I have changed it to postfix but I dont think it makes
>>> any real difference since it is already running as postfix so it could
>>> not change the user to root anyway.
>>>
>>> I changed my high scoring spam actions to add the deliver option and an
>>> incoming high scoring spam and virus was detected and copies were saved
>>> in the following places :-
>>> 20070904/spam/CF509AA0090.2CC09
>>> 20070904/CF509AA0090.2CC09/message
>>> i.e it worked fine and two copies of the message was saved. That is fine
>>> with me.
>>>
>>> I then switched to using
>>> SpamAssassin Rule Actions = SpamScore>=20=>store,non-deliver
>>>
>>> A few spams with a score of >20 came in and they were not delivered but
>>> still were not logged in the spam directory.
>>>
>>> Previously when I had a spam with score >20 which was also identified as
>>> a virus then nothing was stored also not even to the virus store which
>>> seems very wrong.
>>>
>>> On Tue, 2007-09-04 at 09:51, Glenn Steen wrote:
>>>       
>>>> On 03/09/07, Gareth <list-mailscanner at linguaphone.com> wrote:
>>>>         
>>>>> In MailScanner.conf I have :-
>>>>> Quarantine Dir = /var/spool/MailScanner/quarantine
>>>>> Quarantine User = root
>>>>> Quarantine Group = apache
>>>>> Quarantine Permissions = 0660
>>>>>           
>>>> Hm, Uer set to root.... What MTA are you using Gareth? I thought you
>>>> were a postmixer like me:-)... In which case that isn't very likely to
>>>> be correct... Then again...
>>>>
>>>>         
>>>>> However all quarantine entries are stored in the format :-
>>>>> %quarantine-dir%/<<date>>/<<msgid>> and they are viruses and blocked
>>>>> attachments.
>>>>>           
>>>> ... that this works indicate that the settings are correct for your
>>>> setup (either another MTA, or PF run as root, I presume... Or some
>>>> sticky bit magic:). I presume you've linted a few times, without any
>>>> real errors?
>>>>
>>>>         
>>>>> I am assuming this is correct for the virus quaranteen?
>>>>>           
>>>> Yes.
>>>>
>>>>         
>>>>> If that is the case then MailScanner does not seem to be
>>>>>           
>> creating the
>>     
>>>>> additional 'spam' etc... subdirectories for some reason.
>>>>>           
>>>> Seems so, yes.
>>>>
>>>>         
>>>>> Are you sure the format is not
>>>>>           
>> %quarantine-dir%/spam/<<date>>/<<msgid>> as
>>     
>>>>> if that was the case it could just be the issue that the
>>>>>           
>> spam directory does
>>     
>>>>> not exist.
>>>>>           
>>>> Yes we're sure that isn't the case. Steve and Jules know this pretty
>>>> ... intimately:-).
>>>>
>>>> Cheers
>>>> --
>>>> -- Glenn
>>>> email: glenn < dot > steen < at > gmail < dot > com
>>>> work: glenn < dot > steen < at > ap1 < dot > se
>>>>         
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>>     
>
>   

Jules

-- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list