MailScanner 4.77.3 fails to scan some messages

Mark Sapiro mark at msapiro.net
Mon May 11 23:15:45 IST 2009


In MailScanner.conf I have

Scan Messages = %rules-dir%/scan.messages.rules

and also

Read IP Address From Received Header = no

and in %rules-dir%/scan.messages.rules I have amongst others

From: 127.0.0.1 no

This appears to skip scanning of unintended messages. I have attached
two sets of partially sanitized message headers - scanned.txt and
unscanned.txt. These messages were massaged by me from an original and
then resent through the MailScanner server. MailScanner skipped
scanning the 'unscanned.txt' message. The essential difference between
these is in the unscanned message, the third (from the top) Received:
header is present and reads

Received: from albatross.python.org (localhost.localdomain [127.0.0.1])
	by mail.python.org (Postfix) with ESMTP id 602F0C33B
	for <mailman-users at python.org>; Mon, 11 May 2009 20:48:20 +0200 (CEST)

Note that this header is separated from the following (earlier)
Received: headers by X-Spam-Status: and X-Spam-Evidence: headers added
by an intermediate server.

The only thing interesting about this header is it contains IP
127.0.0.1, but my understanding of 

Read IP Address From Received Header = no

is that MailScanner shouldn't be looking at IP addresses in Received:
headers at all.


Now I see the above analysis is probably wrong. I just received another
unscanned message. Headers are attached as scanned2.txt and
unscanned2.txt. Here again, I was able to get the message to be
scanned by removing a Received: header, but the header I removed
doesn't have any 'special' IP address in it.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-------------- next part --------------
Return-Path: <mark at msapiro.net>
X-Original-To: Mark at ms2.msapiro.net
Delivered-To: msapiro_mark at sbh16.songbird.com
Received: from msapiro.net (msapiro.net [68.183.193.239])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by sbh16.songbird.com (Postfix) with ESMTP id 67AC1690235
	for <Mark at ms2.msapiro.net>; Mon, 11 May 2009 14:28:33 -0700 (PDT)
Received: from [127.0.0.1] (helo=msapiro)
	by msapiro.net with smtp (Exim 4.69)
	(envelope-from <mark at msapiro.net>)
	id KJI0ZN-0002NO-0O
	for Mark at ms2.msapiro.net; Mon, 11 May 2009 14:28:35 -0700
X-Spam-Status: OK 0.001
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'problem,': 0.05; 'python':
	0.06; 'mailman': 0.06; 'interface.': 0.07; '(#1,': 0.16; '(apple':
	0.16; '2.3': 0.16; '[gcc': 0.16; 'category,': 0.16; 'darwin':
	0.16; 'from:addr:dave': 0.16; 'main()': 0.16; 'skip:" 40': 0.16;
	'skip:/ 50': 0.16; 'skip:[ 20': 0.16; 'sorry,': 0.16;
	'subject:Delete': 0.16; 'greatly': 0.18; '(most': 0.21; 'skip:_
	10': 0.22; 'thanks': 0.23; 'dave': 0.26; 'last):': 0.26; 'sep':
	0.26; 'skip:" 30': 0.26; 'traceback': 0.26; 'tried': 0.27;
	'thanks!': 0.28; 'skip:f 30': 0.28; 'version': 0.29;
	'appreciated.': 0.30; 'causes': 0.33; 'to:addr:mailman-users':
	0.33; 'variable': 0.34; 'names': 0.34; 'list': 0.35; 'file': 0.36;
	'when': 0.38; 'skip:/ 10': 0.39; 'call': 0.60; 'identify': 0.61;
	'email': 0.63; 'subject:List': 0.63; 'below': 0.65; 'webmaster':
	0.93
Received: from localhost.localdomain (HELO mail.python.org) (127.0.0.1)
	by albatross.python.org with SMTP; 11 May 2009 20:48:20 +0200
X-policyd-weight: using cached result; rate: -8.5
X-Greylist: delayed 399 seconds by postgrey-1.31 at albatross;
	Mon, 11 May 2009 20:48:19 CEST
Received: from smtpauth02.prod.mesa1.secureserver.net
	(smtpauth02.prod.mesa1.secureserver.net [64.202.165.182])
	by mail.python.org (Postfix) with SMTP
	for <mailman-users at python.org>; Mon, 11 May 2009 20:48:19 +0200 (CEST)
Received: (qmail 26652 invoked from network); 11 May 2009 18:41:38 -0000
Received: from unknown (69.245.40.115)
	by smtpauth02.prod.mesa1.secureserver.net (64.202.165.182) with ESMTP;
	11 May 2009 18:41:37 -0000
Mime-Version: 1.0 (Apple Message framework v753)
Message-Id: <44D4029D-1B71-4C3F-A1E6-D2707D2DD707 at dpss.bz>
To: mailman-users at python.org
From: Xxxx Xxxxx <xxxx at xxxx.xx>
Date: Mon, 11 May 2009 13:41:29 -0500
X-Mailer: Apple Mail (2.753)
Subject: [Mailman-Users] Can't Delete List Member
X-BeenThere: mailman-users at python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Mailman mailing list management users <mailman-users.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/mailman-users>,
	<mailto:mailman-users-request at python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/mailman-users>
List-Post: <mailto:mailman-users at python.org>
List-Help: <mailto:mailman-users-request at python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
	<mailto:mailman-users-request at python.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: mailman-users-bounces at python.org
Errors-To: mailman-users-bounces at python.org
X-GPC-MailScanner-ID: 67AC1690235.ADF94
X-GPC-MailScanner: Found to be clean
X-GPC-MailScanner-SpamCheck: not spam, SpamAssassin (cached, score=-0.752,
	required 5, autolearn=not spam, BAYES_00 -0.75, SPF_HELO_PASS -0.00,
	SPF_PASS -0.00)
X-GPC-MailScanner-From: mark at msapiro.net
X-Spam-Status: No
-------------- next part --------------
Return-Path: <mark at msapiro.net>
X-Original-To: Mark at ms2.msapiro.net
Delivered-To: msapiro_mark at sbh16.songbird.com
Received: from msapiro.net (msapiro.net [68.183.193.239])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by sbh16.songbird.com (Postfix) with ESMTP id D4929690235
	for <Mark at ms2.msapiro.net>; Mon, 11 May 2009 14:26:49 -0700 (PDT)
Received: from [127.0.0.1] (helo=msapiro)
	by msapiro.net with smtp (Exim 4.69)
	(envelope-from <mark at msapiro.net>)
	id KJI0WR-0002NO-AP
	for Mark at ms2.msapiro.net; Mon, 11 May 2009 14:26:51 -0700
Received: from albatross.python.org (localhost.localdomain [127.0.0.1])
	by mail.python.org (Postfix) with ESMTP id 602F0C33B
	for <mailman-users at python.org>; Mon, 11 May 2009 20:48:20 +0200 (CEST)
X-Spam-Status: OK 0.001
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'problem,': 0.05; 'python':
	0.06; 'mailman': 0.06; 'interface.': 0.07; '(#1,': 0.16; '(apple':
	0.16; '2.3': 0.16; '[gcc': 0.16; 'category,': 0.16; 'darwin':
	0.16; 'from:addr:dave': 0.16; 'main()': 0.16; 'skip:" 40': 0.16;
	'skip:/ 50': 0.16; 'skip:[ 20': 0.16; 'sorry,': 0.16;
	'subject:Delete': 0.16; 'greatly': 0.18; '(most': 0.21; 'skip:_
	10': 0.22; 'thanks': 0.23; 'dave': 0.26; 'last):': 0.26; 'sep':
	0.26; 'skip:" 30': 0.26; 'traceback': 0.26; 'tried': 0.27;
	'thanks!': 0.28; 'skip:f 30': 0.28; 'version': 0.29;
	'appreciated.': 0.30; 'causes': 0.33; 'to:addr:mailman-users':
	0.33; 'variable': 0.34; 'names': 0.34; 'list': 0.35; 'file': 0.36;
	'when': 0.38; 'skip:/ 10': 0.39; 'call': 0.60; 'identify': 0.61;
	'email': 0.63; 'subject:List': 0.63; 'below': 0.65; 'webmaster':
	0.93
Received: from localhost.localdomain (HELO mail.python.org) (127.0.0.1)
	by albatross.python.org with SMTP; 11 May 2009 20:48:20 +0200
X-policyd-weight: using cached result; rate: -8.5
X-Greylist: delayed 399 seconds by postgrey-1.31 at albatross;
	Mon, 11 May 2009 20:48:19 CEST
Received: from smtpauth02.prod.mesa1.secureserver.net
	(smtpauth02.prod.mesa1.secureserver.net [64.202.165.182])
	by mail.python.org (Postfix) with SMTP
	for <mailman-users at python.org>; Mon, 11 May 2009 20:48:19 +0200 (CEST)
Received: (qmail 26652 invoked from network); 11 May 2009 18:41:38 -0000
Received: from unknown (69.245.40.115)
	by smtpauth02.prod.mesa1.secureserver.net (64.202.165.182) with ESMTP;
	11 May 2009 18:41:37 -0000
Mime-Version: 1.0 (Apple Message framework v753)
Message-Id: <44D4029D-1B71-4C3F-A1E6-D2707D2DD707 at dpss.bz>
To: mailman-users at python.org
From: Xxxx Xxxxx <xxxx at xxxx.xx>
Date: Mon, 11 May 2009 13:41:29 -0500
X-Mailer: Apple Mail (2.753)
Subject: [Mailman-Users] Can't Delete List Member
X-BeenThere: mailman-users at python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Mailman mailing list management users <mailman-users.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/mailman-users>,
	<mailto:mailman-users-request at python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/mailman-users>
List-Post: <mailto:mailman-users at python.org>
List-Help: <mailto:mailman-users-request at python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
	<mailto:mailman-users-request at python.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: mailman-users-bounces at python.org
Errors-To: mailman-users-bounces at python.org
-------------- next part --------------
Return-Path: <mark at msapiro.net>
X-Original-To: Mark at ms2.msapiro.net
Delivered-To: msapiro_mark at sbh16.songbird.com
Received: from msapiro.net (msapiro.net [68.183.193.239])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by sbh16.songbird.com (Postfix) with ESMTP id 053BF690235
	for <Mark at ms2.msapiro.net>; Mon, 11 May 2009 15:05:53 -0700 (PDT)
Received: from [127.0.0.1] (helo=msapiro)
	by msapiro.net with smtp (Exim 4.69)
	(envelope-from <mark at msapiro.net>)
	id KJI2PU-0002TC-F2
	for Mark at ms2.msapiro.net; Mon, 11 May 2009 15:05:54 -0700
Received: from web81602.mail.mud.yahoo.com (web81602.mail.mud.yahoo.com
	[68.142.199.154])
	by sbh16.songbird.com (Postfix) with SMTP id 17584690235
	for <gpc-century at grizz.org>; Mon, 11 May 2009 14:57:18 -0700 (PDT)
Received: (qmail 35713 invoked by uid 60001); 11 May 2009 21:57:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sbcglobal.net; s=s1024;
	t=1242079037; bh=T52UCMjqSGnpxc4pLAXOV/8U148vJm/LHkP+F45mHeg=;
	h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type;
	b=xbP2zkluyfhD2mABz99IX0dsaWDssjF6ao+MdH83afbap5Aw+Tl3JcCbvadB2Zc+MqBteoONBXYpi8E2ZGnqG1QQm1KlcUTEHOCiK+wwGuIj+hiPbWJE+osezQ0giCsLwyryFO93VI0BxPOaMyoSI3gzO8nPVWFMiHw91Pb8+3M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net;
	h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type;
	b=Hz3qwiFDzLpEu6zE4LbUQdzATLHHf1wW4Lv9MhqPiFXRooradxfVJrV3ePBUY+q0e5t+leOh3IQtE5lPaeX6GcsEmqSwpDeUHKbpsDUKrPH3/MoOkzLOrEPUJN1tbDPASoMppaBTu0+WwCwNHiyJ9iiIHlOqx4pgX10FPL/SYlw=;
Message-ID: <761365.34416.qm at web81602.mail.mud.yahoo.com>
X-YMail-OSG: vSmdbCMVM1mwE4Rs.lqgSytUNdf8MVREcFFRtq2R8cT6PmgJaMOD65DMVvEaKe0Uu0IjyaYCGlYT4VaV7xWixYkEHu8lvuvs8D0jZcmAHAZqfT.28PwX9QMxpiJdzYq7dCFyfy6NO2dHWLFziJE18.FOrdCVKuPrIvj0RjQII20YVTbXA737Fl_yQIlEZJF5AseP3W9yXZlA0rB9fEXycbHNSTp3Z8_6cj7_upYUZ2tppQUdh7NfiAB9Y6LQ4GAXDjES9CfLBu2qB6t5xOU8Nq1S0pbcgvAiamNo2_CC3XgPLKN3CcuEvU8XEodawAYURjShUE9hQUER8BnLYXiYAQUwKnKAHKxNliSE
X-Mailer: YahooMailWebService/0.7.289.1
Date: Mon, 11 May 2009 14:57:17 -0700 (PDT)
From: Xxxxxxx Xxxxxx <xxxxxxxxxxxxxx at xxxxxxxxx.xxx>
To: Xxxxxxx Xxxxxxx <xxxxxxxx at xxxxxxxxx.xxx>
In-Reply-To: <220C80D066AB437185E5D5961A51DF6B at JeffsGQ>
MIME-Version: 1.0
Cc: gpc-century at grizz.org
Subject: Re: [GPC-Century] Century First Aid
X-BeenThere: gpc-century at grizz.org
X-Mailman-Version: 2.2.0a0
Precedence: list
Reply-To: patrick_garner at sbcglobal.net
List-Id: <gpc-century.grizz.org>
List-Unsubscribe: <http://www.grizz.org/mailman/options/gpc-century>,
	<mailto:gpc-century-request at grizz.org?subject=unsubscribe>
List-Archive: <http://www.grizz.org/mailman/private/gpc-century>
List-Post: <mailto:gpc-century at grizz.org>
List-Help: <mailto:gpc-century-request at grizz.org?subject=help>
List-Subscribe: <http://www.grizz.org/mailman/listinfo/gpc-century>,
	<mailto:gpc-century-request at grizz.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: gpc-century-bounces+mark=msapiro.net at grizz.org
Errors-To: gpc-century-bounces+mark=msapiro.net at grizz.org
X-GPC-MailScanner-ID: 053BF690235.AE31E
X-GPC-MailScanner: Found to be clean
X-GPC-MailScanner-SpamCheck: not spam, SpamAssassin (cached, score=-0.25,
	required 5, BAYES_00 -0.75, BOTNET_SERVERWORDS 0.50)
X-GPC-MailScanner-From: mark at msapiro.net
X-Spam-Status: No
-------------- next part --------------
Return-Path: <mark at msapiro.net>
X-Original-To: Mark at ms2.msapiro.net
Delivered-To: msapiro_mark at sbh16.songbird.com
Received: from msapiro.net (msapiro.net [68.183.193.239])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by sbh16.songbird.com (Postfix) with ESMTP id 0799B690235
	for <Mark at ms2.msapiro.net>; Mon, 11 May 2009 15:01:38 -0700 (PDT)
Received: from [127.0.0.1] (helo=msapiro)
	by msapiro.net with smtp (Exim 4.69)
	(envelope-from <mark at msapiro.net>)
	id KJI2IR-0000L4-GQ
	for Mark at ms2.msapiro.net; Mon, 11 May 2009 15:01:39 -0700
Received: from web81602.mail.mud.yahoo.com (web81602.mail.mud.yahoo.com
	[68.142.199.154])
	by sbh16.songbird.com (Postfix) with SMTP id 17584690235
	for <gpc-century at grizz.org>; Mon, 11 May 2009 14:57:18 -0700 (PDT)
Received: (qmail 35713 invoked by uid 60001); 11 May 2009 21:57:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sbcglobal.net; s=s1024;
	t=1242079037; bh=T52UCMjqSGnpxc4pLAXOV/8U148vJm/LHkP+F45mHeg=;
	h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type;
	b=xbP2zkluyfhD2mABz99IX0dsaWDssjF6ao+MdH83afbap5Aw+Tl3JcCbvadB2Zc+MqBteoONBXYpi8E2ZGnqG1QQm1KlcUTEHOCiK+wwGuIj+hiPbWJE+osezQ0giCsLwyryFO93VI0BxPOaMyoSI3gzO8nPVWFMiHw91Pb8+3M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net;
	h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type;
	b=Hz3qwiFDzLpEu6zE4LbUQdzATLHHf1wW4Lv9MhqPiFXRooradxfVJrV3ePBUY+q0e5t+leOh3IQtE5lPaeX6GcsEmqSwpDeUHKbpsDUKrPH3/MoOkzLOrEPUJN1tbDPASoMppaBTu0+WwCwNHiyJ9iiIHlOqx4pgX10FPL/SYlw=;
Message-ID: <761365.34416.qm at web81602.mail.mud.yahoo.com>
X-YMail-OSG: vSmdbCMVM1mwE4Rs.lqgSytUNdf8MVREcFFRtq2R8cT6PmgJaMOD65DMVvEaKe0Uu0IjyaYCGlYT4VaV7xWixYkEHu8lvuvs8D0jZcmAHAZqfT.28PwX9QMxpiJdzYq7dCFyfy6NO2dHWLFziJE18.FOrdCVKuPrIvj0RjQII20YVTbXA737Fl_yQIlEZJF5AseP3W9yXZlA0rB9fEXycbHNSTp3Z8_6cj7_upYUZ2tppQUdh7NfiAB9Y6LQ4GAXDjES9CfLBu2qB6t5xOU8Nq1S0pbcgvAiamNo2_CC3XgPLKN3CcuEvU8XEodawAYURjShUE9hQUER8BnLYXiYAQUwKnKAHKxNliSE
Received: from [71.131.24.84] by web81602.mail.mud.yahoo.com via HTTP;
	Mon, 11 May 2009 14:57:17 PDT
X-Mailer: YahooMailWebService/0.7.289.1
Date: Mon, 11 May 2009 14:57:17 -0700 (PDT)
From: Xxxxxxx Xxxxxx <xxxxxxxxxxxxxx at xxxxxxxxx.xxx>
To: Xxxxxxx Xxxxxxx <xxxxxxxx at xxxxxxxxx.xxx>
In-Reply-To: <220C80D066AB437185E5D5961A51DF6B at JeffsGQ>
MIME-Version: 1.0
Cc: gpc-century at grizz.org
Subject: Re: [GPC-Century] Century First Aid
X-BeenThere: gpc-century at grizz.org
X-Mailman-Version: 2.2.0a0
Precedence: list
Reply-To: patrick_garner at sbcglobal.net
List-Id: <gpc-century.grizz.org>
List-Unsubscribe: <http://www.grizz.org/mailman/options/gpc-century>,
	<mailto:gpc-century-request at grizz.org?subject=unsubscribe>
List-Archive: <http://www.grizz.org/mailman/private/gpc-century>
List-Post: <mailto:gpc-century at grizz.org>
List-Help: <mailto:gpc-century-request at grizz.org?subject=help>
List-Subscribe: <http://www.grizz.org/mailman/listinfo/gpc-century>,
	<mailto:gpc-century-request at grizz.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: gpc-century-bounces+mark=msapiro.net at grizz.org
Errors-To: gpc-century-bounces+mark=msapiro.net at grizz.org


More information about the MailScanner mailing list