Any Help ?MailScanner quarantines message in wrong format

[ms fin]

Hi,
Now I Found the Root cause for problem:

- We are adding DNSWL header to mails for classifying senders server

header is added like this ( head of message file )

X-Organisation-Whitelist: No
Received: from [ip.add.re.ss] (unknown [ip.add.re.ss])
        by host (Postfix) with ESMTP id 95876A78057

Because message file starts with string other than "received"
it is assumed as ASCII file, then MailWatch handles it differently...

Header should be added somewhere else in headers - if possible, or MailWatch
release script
changed...



2011/2/25 Martin Hepworth <maxsec at gmail.com>

> So what does 'message' actually look like?
>
> rfc822 is very text like, perhaps the 'file' command is throwing an
> incorrect result. What happens if you copy the file to the old server and
> run 'file' and what happens with the output of 'file' if you copy a file
> from the old server to the new?
>
>
> --
> Martin Hepworth
> Oxford, UK
>
>
> On 25 February 2011 08:05, ms fin <ms.fin11 at gmail.com> wrote:
>
>> Hi,
>>
>> I Have  CentOS 5.5 with Postfix
>> MailScanner-4.81.4-1 and mailwatch-1.0.5
>> installed. Everything is working fine except:
>>
>> When MailScanner quarantines a message, for example
>>
>> /var/spool/MailScanner/quarantine/20110224/95876A78057.AFA98/
>>
>> -rw-rw---- 1 postfix www 38400 Feb 24 13:06 message
>> -rw-rw---- 1 postfix www 27648 Feb 24 13:06 testi.txt.doc
>>
>> filetype on "message" file is: ASCII mail text   ( checked with file
>> command )
>>
>> My MailScanner.conf are here:
>>
>> Quarantine Dir = /var/spool/MailScanner/quarantine
>> Quarantine User = root
>> Quarantine Group = www
>> Quarantine Permissions = 0770
>> Quarantine Infections = yes
>> Quarantine Modified Body = no
>> Quarantine Whole Message = yes
>> Quarantine Whole Messages As Queue Files = no
>>
>> To be able to release message it should be format: message/rfc822
>>
>> ---
>>
>> I Have a older production server and in that quarantined message-files are
>> in correct file format.
>> I have triple checked all my config files and I do not find any reason
>> why....
>>
>> Could someone help ?
>>
>> Rgds, Roger
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110225/c678339e/attachment.html