Spam Actions & forward

Julian Field MailScanner at ecs.soton.ac.uk
Fri Apr 11 09:07:16 IST 2008



Pascal Maes wrote:
>
> Le 10-avr.-08 à 22:58, Julian Field a écrit :
>> What does your maillog say when it processes this message? Make sure 
>> all the "Log..." settings in MailScanner.conf are switched on.
>> I have just tested this, and it is working fine.
>> One thing though: are you sure the message is triggering your "Spam 
>> Actions" and not your "High Scoring Spam Actions"? I just fell into 
>> the same trap myself, while testing this setup to see if the code 
>> works or not.
>>
>
> I have the same setting for both actions :
>
> Spam Actions = %rules-dir%/spam_actions.rules
> High Scoring Spam Actions = %rules-dir%/spam_actions.rules
>
>
> In the maillog, I have
>
>
> Apr 10 21:47:55 smtp-1 MailScanner[2517]: Message 1E3F9E9A36.DF30E 
> from 130.104.236.3 (mp at amd-1-1.elec.ucl.ac.be) to uclouvain.be is 
> polluriel, SpamAssassin (cached, score=38.674, requis 5, 
> autolearn=spam, ALL_TRUSTED -1.80, BAYES_40 -0.58, DIET_1 0.08, HOHOHO 
> 5.00, SARE_ADLTSUB2 1.23, SARE_ADULT2 1.42, SARE_SUB_MULTI_PRN2 1.66, 
> SARE_SUB_PENIS 1.67, SPECOF 5.00, SUBJ_COCK 5.00, SUBJ_FUCK 5.00, 
> SUBJ_PENIS 5.00, WEIGHT1 5.00, WEIGHT2 5.00)
>
> Apr 10 21:47:55 smtp-1 MailScanner[2517]: Spam Checks: Found 1 spam 
> messages
>
> Apr 10 21:47:56 smtp-1 MailScanner[2517]: Spam Actions: message 
> 1E3F9E9A36.DF30E actions are 
> spam-warn at uclouvain.be,forward,deliver,header
>
>
> I wonder why the string "forward spam-warn at uclouvain.be" is splitted, 
> reverted and why there is a comma between the two terms
It's the internal version once it has parsed it. It proves that it has 
got the actions correctly parsed.
>
>> Pascal Maes wrote:
>>> Hello,
>>>
>>> I would like to send all the spam coming from our domain to a 
>>> special address.
>>>
>>> In MailScanner.conf, I have
>>>
>>> Spam Actions = %rules-dir%/spam_actions.rules
>>>
>>> and in spam_actions.rules, I put :
>>>
>>> From:           130.104.                deliver header 
>>> "X-SGSI-Spam-Status: Yes" forward Spam-Warn at uclouvain.be
>>> From:           *@*.ucl.ac.be           deliver header 
>>> "X-SGSI-Spam-Status: Yes" forward Spam-Warn at uclouvain.be
>>> From:           *@uclouvain.be          deliver header 
>>> "X-SGSI-Spam-Status: Yes" forward Spam-Warn at uclouvain.be
>>> From:           *@*.uclouvain.be        deliver header 
>>> "X-SGSI-Spam-Status: Yes" forward Spam-Warn at uclouvain.be
>>>
>>>
>>> But when I send an email with a lot of "special words", the mail is 
>>> well treated as spam but it is not send to the forward address.
>>>
>>> What's wrong ?
>>>
>>> Thanks
>>> -- 
>>> Pascal
>>>
>>>
>>>
>>
>> Jules
>>
>
>
> -- 
> Pascal
>
>
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list