Blocked message for no apparent reason

[Gottschalk, David]

I don't see in the logs anywhere any hint that clam is blocking this message.

Normally when ClamAV blocks a message, it associates it with the message id, and shows up in the logs.

Any other ideas?

David Gottschalk
Emory University
UTS Messaging Team
404.727.9744


-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ken A
Sent: Thursday, May 03, 2012 12:04 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Blocked message for no apparent reason

grep -i clam maillog ?
Ken

On 5/3/2012 10:45 AM, Gottschalk, David wrote:
> I've got a strange issue with MailScanner. It seems a message is being
> blocked, but I'm not sure why. Originally, I thought it was blocked by
> SpamAssassin (even though the score has never exceeded the threshold),
> and hitting a cache hit for every subsequent message. I cleared the
> SpamAssassin cache, and even whitelisted it in MailScanner with no
> dice. Any help figuring out what is going on here would be greatly
> appreciated. I've never seen this occur before, so I'm not sure where
> else to look and investigate. Below is a copy of the sendmail logs,
> some sensitive information has been removed.
>
> Apr 18 16:11:55 sendmail: [mail.info] q3IKBtOJ020557:
> from=<no-reply at burgiss.com>, size=1377, class=0, nrcpts=1,
> msgid=<XMAILj4PPRE3IvhXJ4d00000538 at xmail.bg.lan>, proto=ESMTP,
> daemon=MTA, relay=removed Apr 18 16:12:06 MailScanner: [mail.notice]
> Saved entire message to
> /mailscanner/MailScanner/quarantine/20120418/q3IKBtOJ020557 Apr 18
> 16:12:11 MailScanner: [mail.info] Message q3IKBtOJ020557 from
> 74.125.149.40 (no-reply at burgiss.com) is whitelisted Apr 18 16:12:11
> MailScanner: [mail.info] SpamAssassin cache hit for message
> q3IKBtOJ020557 Apr 18 16:12:11 MailScanner: [mail.info] Message
> q3IKBtOJ020557 from 74.125.149.40 (no-reply at burgiss.com) to emory.edu
> is not spam (whitelisted), SpamAssassin (cached, score=2.006, required
> 8, autolearn=disabled, MIME_HEADER_CTYPE_ONLY 2.00, T_MIME_NO_TEXT
> 0.01)
>
> David Gottschalk Emory University UTS Messaging Team
>
>
> ________________________________
>
> This e-mail message (including any attachments) is for the sole use of
> the intended recipient(s) and may contain confidential and privileged
> information. If the reader of this message is not the intended
> recipient, you are hereby notified that any dissemination,
> distribution or copying of this message (including any attachments) is
> strictly prohibited.
>
> If you have received this message in error, please contact the sender
> by reply e-mail message and destroy all copies of the original message
> (including attachments).
>
>
>
>

--
Ken Anderson
Pacific Internet - http://www.pacific.net Latest Pacific.Net Status - http://twitter.com/pacnetstatus
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

________________________________

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).