Maximum Message Size = %rules-dir%/max.message.size.rules ruleset does not work

[Jaco Lange]

Hi Everyone

I looked everywhere and could only find a post from another user that
is having the sames issue with no solution.

The problem is as follow. MailScanner ignores the Maximum Message Size
parameter, or there is some error somewhere and I am missing it.

the contents of the %rules-dir%/max.message.size.rules is a follow:


[root at mailscanner rules]# cat max.message.size.rules
To:             *@receivingdomain.com       1024
FromOrTo:       default                         1394606

If I sent a message to user at mydomain.com larger than 1024 bytes it get
delivered.

If I remove the ruleset and put the following in
Maximum Message Size = 1024

then also does not block the email.
I have run MailScanner in debug mode and could not see any errors

here is the log for the mail in question

Oct 16 07:38:10 mailscanner MailScanner[23746]: MailScanner E-Mail
Virus Scanner version 4.81.4 starting...
Oct 16 07:38:10 mailscanner MailScanner[23746]: Reading configuration
file /etc/MailScanner/MailScanner.conf
Oct 16 07:38:10 mailscanner MailScanner[23746]: Reading configuration
file /etc/MailScanner/conf.d/README
Oct 16 07:38:10 mailscanner MailScanner[23746]: Config: calling custom
init function MailWatchLogging
Oct 16 07:38:10 mailscanner MailScanner[23746]: Started SQL Logging child
Oct 16 07:38:10 mailscanner MailScanner[23746]: Using SpamAssassin results cache
Oct 16 07:38:10 mailscanner MailScanner[23746]: Connected to
SpamAssassin cache database
Oct 16 07:38:10 mailscanner MailScanner[23746]: Enabling SpamAssassin
auto-whitelist functionality...
Oct 16 07:38:19 mailscanner MailScanner[23746]: Connected to
Processing Attempts Database
Oct 16 07:38:19 mailscanner MailScanner[23746]: Found 0 messages in
the Processing Attempts Database
Oct 16 07:38:19 mailscanner MailScanner[23746]: lock.pl sees Config
LockType =  posix
Oct 16 07:38:19 mailscanner MailScanner[23746]: lock.pl sees have_module =  0
Oct 16 07:38:19 mailscanner MailScanner[23746]: Using locktype = posix
Oct 16 07:38:26 mailscanner update.virus.scanners: Found clamav installed
Oct 16 07:38:26 mailscanner update.virus.scanners: Running autoupdate for clamav
Oct 16 07:38:26 mailscanner ClamAV-autoupdate[23825]: ClamAV updated
Oct 16 07:38:26 mailscanner update.virus.scanners: Found generic installed
Oct 16 07:38:26 mailscanner update.virus.scanners: Running autoupdate
for generic
Oct 16 07:38:46 mailscanner sendmail[24000]: o9G5ckDe024000:
from=<user at sedingdomain.com>, size=1878332, class=0, nrcpts=1,
msgid=<4CB95679020000AF000423E0 at email.sedingdomain.net>, proto=ESMTP,
daemon=MTA, relay=email.sedingdomain.net [192.168.10.12]
Oct 16 07:38:49 mailscanner MailScanner[23746]: New Batch: Scanning 1
messages, 1878851 bytes
Oct 16 07:38:49 mailscanner MailScanner[23746]: Created attachment
dirs for 1 messages
Oct 16 07:38:49 mailscanner MailScanner[23746]: Looked up unknown
string nonpasswordedarchive in language translation file
/etc/MailScanner/reports/en/languages.conf
Oct 16 07:38:49 mailscanner MailScanner[23746]: Completed checking by
/usr/bin/file
Oct 16 07:38:49 mailscanner MailScanner[23746]: Virus and Content
Scanning: Starting
Oct 16 07:38:49 mailscanner MailScanner[23746]: Commencing scanning by clamav...
Oct 16 07:38:54 mailscanner MailScanner[23746]: Completed scanning by clamav
Oct 16 07:38:54 mailscanner MailScanner[23746]: Virus Scanning
completed at 348208 bytes per second
Oct 16 07:38:54 mailscanner MailScanner[23746]: Spam Checks: Starting
Oct 16 07:38:54 mailscanner MailScanner[23746]: Message o9G5ckDe024000
from 192.168.10.12 (user at sedingdomain.com) to receivingdomain.com is
too big for spam checks (1878851 > 500000 bytes)
Oct 16 07:38:54 mailscanner MailScanner[23746]: About to deliver 1 messages
Oct 16 07:38:54 mailscanner MailScanner[23746]: Uninfected: Delivered 1 messages
Oct 16 07:38:54 mailscanner MailScanner[23746]: Deleted 1 messages
from processing-database
Oct 16 07:38:54 mailscanner MailScanner[23746]: Batch completed at
345531 bytes per second (1878851 / 5)
Oct 16 07:38:54 mailscanner MailScanner[23746]: Batch (1 message)
processed in 5.44 seconds
Oct 16 07:38:54 mailscanner MailScanner[23746]: Logging message
o9G5ckDe024000 to SQL
Oct 16 07:38:54 mailscanner MailScanner[23746]: "Always Looked Up
Last" took 0.00 seconds
Oct 16 07:38:54 mailscanner MailScanner[23746]: Config: calling custom
end function MailWatchLogging
Oct 16 07:38:54 mailscanner MailScanner[23746]: MailScanner child
dying of old age
>From user at sedingdomain.com  Sat Oct 16 07:38:54 2010
 Subject: Fwd: Why women need flowers
  Folder: /var/mail/user                                                1878863
Oct 16 07:38:54 mailscanner sendmail[24021]: o9G5ckDe024000:
to=<user at receivingdomain.com>, delay=00:00:08, xdelay=00:00:00,
mailer=local, pri=1998332, dsn=2.0.0, stat=Sent
Oct 16 07:38:54 mailscanner sendmail[24021]: o9G5ckDe024000:
o9G5csjp024021: DSN: Return receipt
Oct 16 07:38:54 mailscanner sendmail[24021]: o9G5csjp024021:
to=<user at sedingdomain.com>, delay=00:00:00, xdelay=00:00:00,
mailer=smtp, pri=30000, relay=[192.168.10.12] [192.168.10.12],
dsn=2.0.0, stat=Sent (Ok)


Other rules is working like the spam.blacklist.rules and spam.whitelist.rules


Many thanks
Jaco