MailScanner & SA results

[Dudi Goldenberg]

Hello list,

 

I have MS v4.78.17 installed on a BlueQuartz server.

 

Also installed are ClamAV 0.95.3 and SA 3.2.5.

 

I have MailScanner set to "Virus Scanners = none" and I have SA setup
with the ClamAV scoring plugin.

 

What happens is that the SA milter detects fine:

 

Jan 15 21:52:44 puppy spamd[32447]: spamd: identified spam (12.4/5.0)
for dudi:502 in 4.6 seconds, 336 bytes. 

Jan 15 21:52:44 puppy spamd[32447]: spamd: result: Y 12 -
CLAMAV,CLAMAV_VIRUS,MISSING_DATE,MISSING_HEADERS,MISSING_MID,MISSING_SUB
JE

CT,RCVD_IN_SORBS_WEB,SPF_PASS,TVD_SPACE_RATIO
scantime=4.6,size=336,user=dudi,uid=502,required_score=5.0,rhost=localho
st,raddr=127.0

.0.1,rport=36275,mid=(unknown),autolearn=failed

 

But MailScanner fails to see all the test results, from MailWatch:

 

-0.79   AWL                                       From: address is in
the auto white-list 

1.58    MISSING_HEADERS          Missing To: header 

1.28    MISSING_SUBJECT            Missing Subject: header 

1.12    RCVD_IN_SORBS_WEBSORBS:            sender is a abuseable web
server 

2.90    TVD_SPACE_RATIO

 

I'd expect the results to be close, if not identical, which is not the
case.

 

Another issue I see is that although I have "Virus Scanners = none" in
MS conf, log shows that MS is still running its ClamAV update  which
IMHO it should not.

 

Pointers appreciated.

 

Dudi Goldenberg
CTO
Kolcore Ltd.
Registered Linux user #79506

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100115/fcd314a1/attachment.html