Any Help ?MailScanner quarantines message in wrong format
ms.fin11 at gmail.com
Fri Feb 25 11:08:35 GMT 2011
Now I Found the Root cause for problem:
- We are adding DNSWL header to mails for classifying senders server
header is added like this ( head of message file )
Received: from [ip.add.re.ss] (unknown [ip.add.re.ss])
by host (Postfix) with ESMTP id 95876A78057
Because message file starts with string other than "received"
it is assumed as ASCII file, then MailWatch handles it differently...
Header should be added somewhere else in headers - if possible, or MailWatch
2011/2/25 Martin Hepworth <maxsec at gmail.com>
> So what does 'message' actually look like?
> rfc822 is very text like, perhaps the 'file' command is throwing an
> incorrect result. What happens if you copy the file to the old server and
> run 'file' and what happens with the output of 'file' if you copy a file
> from the old server to the new?
> Martin Hepworth
> Oxford, UK
> On 25 February 2011 08:05, ms fin <ms.fin11 at gmail.com> wrote:
>> I Have CentOS 5.5 with Postfix
>> MailScanner-4.81.4-1 and mailwatch-1.0.5
>> installed. Everything is working fine except:
>> When MailScanner quarantines a message, for example
>> -rw-rw---- 1 postfix www 38400 Feb 24 13:06 message
>> -rw-rw---- 1 postfix www 27648 Feb 24 13:06 testi.txt.doc
>> filetype on "message" file is: ASCII mail text ( checked with file
>> command )
>> My MailScanner.conf are here:
>> Quarantine Dir = /var/spool/MailScanner/quarantine
>> Quarantine User = root
>> Quarantine Group = www
>> Quarantine Permissions = 0770
>> Quarantine Infections = yes
>> Quarantine Modified Body = no
>> Quarantine Whole Message = yes
>> Quarantine Whole Messages As Queue Files = no
>> To be able to release message it should be format: message/rfc822
>> I Have a older production server and in that quarantined message-files are
>> in correct file format.
>> I have triple checked all my config files and I do not find any reason
>> Could someone help ?
>> Rgds, Roger
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> Before posting, read http://wiki.mailscanner.info/posting
>> Support MailScanner development - buy the book off the website!
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> Before posting, read http://wiki.mailscanner.info/posting
> Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the MailScanner