Prombem with rule actions

[Gareth]

SpamAssassin Rule Actions = BAYES_99=>store,non-deliver
SpamAssassin Rule Actions = SpamScore>=20=>store,non-deliver
non-deliver option works but store does not

SpamAssassin Rule Actions = SpamScore>=20=>forward
test at cdlive.co.uk,store,non-deliver
non-deliver works but store and forward dont

SpamAssassin Rule Actions = SpamScore>=20=>forward test at cdlive.co.uk,store
store works!
but foward doesnt

I am beginning to see a pattern here...

SpamAssassin Rule Actions = SpamScore>=20=>forward
test at cdlive.co.uk,non-deliver,store
store works
non-deliver doesn't


It looks to me that only the last option works.

Lets try it a little bit different
SpamAssassin Rule Actions = SpamScore>=20=>non-deliver, SpamScore>=20=>store
Not delivered and stored - SUCCESS!


It looks like there may be a parsing bug.

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Julian
> Field
> Sent: 04 September 2007 19:31
> To: MailScanner discussion
> Subject: Re: Prombem with rule actions
>
>
>
>
> Gareth wrote:
> > Jules, Could this be a bug?
> >
> > As it works when I put the store option in the high scoring
> rules but wont
> > work as part of a rules actions line I cant think of any cause
> other that a
> > problem with the rule actioon line itself or a bug somewhere.
> >
> I have this lot set:
>
> Required SpamAssassin Score = 6
> Non Spam Actions = deliver header "X-Spam-Status: No"
> Spam Actions = deliver header "X-Spam-Status: Yes"
> High Scoring Spam Actions = deliver header "X-Spam-Status: Yes"
>
> SpamAssassin Rule Actions = FROM_BOSS_WIFE=>forward
> secretary at domain.com, SpamScore>=6=>forward
> spam.score at greater6.com,store,non-deliver, SpamScore<100=>store,forward
> spam.score at less100.com, store, SpamScore>100=>deliver,store
>
> And I get everything stored in the "nonspam" archive.
>
> So it appears to work for me. So I don't quite see why it doesn't for
> you. It sets all the spam actions first, long before it does anything
> about them. So it shouldn't be possible for the action to work in one
> setting and not in another.
> >
> >
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info
> >> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Gareth
> >> Sent: 04 September 2007 13:37
> >> To: MailScanner discussion
> >> Subject: Re: Prombem with rule actions
> >>
> >>
> >> I tried the following aswell as an alternative and it didn't store the
> >> message either.
> >>
> >> SpamAssassin Rule Actions = BAYES_99=>store,non-deliver
> >>
> >> On Tue, 2007-09-04 at 12:22, Gareth wrote:
> >>
> >>> Thanks for that. I have changed it to postfix but I dont
> think it makes
> >>> any real difference since it is already running as postfix so it could
> >>> not change the user to root anyway.
> >>>
> >>> I changed my high scoring spam actions to add the deliver
> option and an
> >>> incoming high scoring spam and virus was detected and copies
> were saved
> >>> in the following places :-
> >>> 20070904/spam/CF509AA0090.2CC09
> >>> 20070904/CF509AA0090.2CC09/message
> >>> i.e it worked fine and two copies of the message was saved.
> That is fine
> >>> with me.
> >>>
> >>> I then switched to using
> >>> SpamAssassin Rule Actions = SpamScore>=20=>store,non-deliver
> >>>
> >>> A few spams with a score of >20 came in and they were not
> delivered but
> >>> still were not logged in the spam directory.
> >>>
> >>> Previously when I had a spam with score >20 which was also
> identified as
> >>> a virus then nothing was stored also not even to the virus store which
> >>> seems very wrong.
> >>>
> >>> On Tue, 2007-09-04 at 09:51, Glenn Steen wrote:
> >>>
> >>>> On 03/09/07, Gareth <list-mailscanner at linguaphone.com> wrote:
> >>>>
> >>>>> In MailScanner.conf I have :-
> >>>>> Quarantine Dir = /var/spool/MailScanner/quarantine
> >>>>> Quarantine User = root
> >>>>> Quarantine Group = apache
> >>>>> Quarantine Permissions = 0660
> >>>>>
> >>>> Hm, Uer set to root.... What MTA are you using Gareth? I thought you
> >>>> were a postmixer like me:-)... In which case that isn't very
> likely to
> >>>> be correct... Then again...
> >>>>
> >>>>
> >>>>> However all quarantine entries are stored in the format :-
> >>>>> %quarantine-dir%/<<date>>/<<msgid>> and they are viruses and blocked
> >>>>> attachments.
> >>>>>
> >>>> ... that this works indicate that the settings are correct for your
> >>>> setup (either another MTA, or PF run as root, I presume... Or some
> >>>> sticky bit magic:). I presume you've linted a few times, without any
> >>>> real errors?
> >>>>
> >>>>
> >>>>> I am assuming this is correct for the virus quaranteen?
> >>>>>
> >>>> Yes.
> >>>>
> >>>>
> >>>>> If that is the case then MailScanner does not seem to be
> >>>>>
> >> creating the
> >>
> >>>>> additional 'spam' etc... subdirectories for some reason.
> >>>>>
> >>>> Seems so, yes.
> >>>>
> >>>>
> >>>>> Are you sure the format is not
> >>>>>
> >> %quarantine-dir%/spam/<<date>>/<<msgid>> as
> >>
> >>>>> if that was the case it could just be the issue that the
> >>>>>
> >> spam directory does
> >>
> >>>>> not exist.
> >>>>>
> >>>> Yes we're sure that isn't the case. Steve and Jules know this pretty
> >>>> ... intimately:-).
> >>>>
> >>>> Cheers
> >>>> --
> >>>> -- Glenn
> >>>> email: glenn < dot > steen < at > gmail < dot > com
> >>>> work: glenn < dot > steen < at > ap1 < dot > se
> >>>>
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
> >>
> >>
> >>
> >
> >
>
> Jules
>
> --
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> For all your IT requirements visit www.transtec.co.uk
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>