Mailscanner detects but does not deliver Spam message

[Julian Field]

The GTUBE email scores about 1000 or some very high figure like this. 
This will be greater than your "High SpamAssassin Score" setting in 
MailScanner.conf (10 by default) and will therefore cause your "High 
Scoring Spam Actions" to be used. By default this is set to "store" 
which will just archive the high-scoring spam, but not deliver it. This 
is set by default to save your users from receiving all the definite 
spam altogether, so they suddenly notice a large drop in the amount of 
junk hitting their inboxes, and it saves your mail delivery system from 
having to deliver all that definite spam.

If you want high-scoring spam to be delivered, you would need to include 
the word "deliver" in your list of High Scoring Spam Actions in 
MailScanner.conf, then "service MailScanner reload" to force it to 
re-read the configuration files immediately.

Best regards,
Jules


Patil, Manjiri S wrote:
>
> Hi ,
>
> I have installed Mailscanner Version 4.70.6-1 for RedHat, Fedora and 
> Mandrake Linux (and other RPM-based Linux distributions) 
> <http://mailscanner.info/files/4/rpm/MailScanner-4.70.6-1.rpm.tar.gz> 
> as per following instructions.
>
> 1. Download the latest "for Red Hat, Fedora, and Mandrake Linux (and 
> other RPM-based Linux distributions)" release of MailScanner, as well 
> as the latest "ClamAV and SpamAssassin easy installation packages." 
> i.e ClamAV 0.93.1 
> <http://mailscanner.info/files/4/install-Clam-0.93.1-SA-3.2.5.tar.gz> 
> and SpamAssassin 3.2.5 
> <http://mailscanner.info/files/4/install-Clam-0.93.1-SA-3.2.5.tar.gz>.
>
> 2. I started by installing SpamAssassin/ClamAV package first. I got 
> message saying “If you want to use MailScanners support for Clamd 
> (virus-scanning
>
> daemon) then I recommend you cancel this script now (press Ctrl-C) and 
> install the RPMs for clamav, clamav-db and clamd from… Otherwise you 
> probably want me to install ClamAV now.” I
>
> continued with the installation of ClamAV.
>
> 3. Installation of SpamAssassin and clamav went ok without errors. I 
> also installed Razor-agents-sdk and Razor2 and DCC. Added VirusScan = 
> clamav , Spamassassin=yes in mailscanner.conf and started service etc.
>
> 4. When I sent a test spam GTube mail
>
> E.g mail -s "test spam" root at abc.edu < /abc/sample-spam.txt
>
> I do see in maillog that spam is detected. HOWEVER the mail is not 
> delivered in the root mailbox. However If I sent plain email with no 
> spam it does get delivered.
>
> Jun 24 11:11:52 smgtest6 sendmail[29920]: m5OFBqrk029920: from=root, 
> size=844, class=0, nrcpts=1, 
> msgid=<200806241511.m5OFBqrk029920 at smgtest6.bu.edu>, relay=root at localhost
>
> Jun 24 11:11:53 smgtest6 sendmail[29921]: m5OFBrZB029921: 
> from=<root at smgtest6.bu.edu>, size=1126, class=0, nrcpts=1, 
> msgid=<200806241511.m5OFBqrk029920 at smgtest6.bu.edu>, proto=ESMTP, 
> daemon=MTA, relay=localhost.localdomain [127.0.0.1]
>
> Jun 24 11:11:53 smgtest6 sendmail[29920]: m5OFBqrk029920: 
> to=root at smgtest6.bu.edu, ctladdr=root (0/0), delay=00:00:01, 
> xdelay=00:00:00, mailer=relay, pri=30844, relay=[127.0.0.1] 
> [127.0.0.1], dsn=2.0.0, stat=Sent (m5OFBrZB029921 Message accepted for 
> delivery)
>
> Jun 24 11:11:53 smgtest6 MailScanner[28651]: New Batch: Scanning 1 
> messages, 1595 bytes
>
> Jun 24 11:11:54 smgtest6 MailScanner[28651]: SpamAssassin cache hit 
> for message m5OFBrZB029921
>
> Jun 24 11:11:54 smgtest6 MailScanner[28651]: Spam Checks: Found 1 spam 
> messages
>
> Jun 24 11:11:54 smgtest6 MailScanner[28651]: Virus and Content 
> Scanning: Starting
>
> Jun 24 11:12:19 smgtest6 MailScanner[28651]: MailScanner child dying 
> of old age
>
> Jun 24 11:12:19 smgtest6 MailScanner[29932]: MailScanner E-Mail Virus 
> Scanner version 4.70.6 starting...
>
> Jun 24 11:12:20 smgtest6 MailScanner[29932]: Read 821 hostnames from 
> the phishing whitelist
>
> Jun 24 11:12:20 smgtest6 MailScanner[29932]: Read 2936 hostnames from 
> the phishing blacklist
>
> Jun 24 11:12:20 smgtest6 MailScanner[29932]: SpamAssassin temporary 
> working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp
>
> Jun 24 11:12:21 smgtest6 MailScanner[29932]: Using SpamAssassin 
> results cache
>
> Jun 24 11:12:21 smgtest6 MailScanner[29932]: Connected to SpamAssassin 
> cache database
>
> Jun 24 11:12:21 smgtest6 MailScanner[29932]: Enabling SpamAssassin 
> auto-whitelist functionality...
>
> Jun 24 11:12:29 smgtest6 MailScanner[29932]: Using locktype = posix
>
> Please Help .
>
> Manjiri Patil
>
> Information Technology Services
>
> BU School Of Management
>
> mpatil at bu.edu <mailto:mpatil at bu.edu>
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.