Spam Action: Store

Martin Hepworth maxsec at gmail.com
Fri May 10 16:30:37 IST 2013 

can the postfix user write into the store area ?

-- 
Martin Hepworth, CISSP
Oxford, UK


On 10 May 2013 15:45, Ronnie Smith <rsmith at dynamicquest.com> wrote:

> Version info:****
>
> ** **
>
> This is CentOS release 6.3 (Final)****
>
> This is Perl version 5.010001 (5.10.1)****
>
> ** **
>
> This is MailScanner version 4.84.5****
>
> Module versions are:****
>
> 1.00    AnyDBM_File****
>
> 1.30    Archive::Zip****
>
> 0.23    bignum****
>
> 1.11    Carp****
>
> 2.02    Compress::Zlib****
>
> 1.119   Convert::BinHex****
>
> 0.17    Convert::TNEF****
>
> 2.124   Data::Dumper****
>
> 2.27    Date::Parse****
>
> 1.03    DirHandle****
>
> 1.06    Fcntl****
>
> 2.77    File::Basename****
>
> 2.14    File::Copy****
>
> 2.02    FileHandle****
>
> 2.08    File::Path****
>
> 0.22    File::Temp****
>
> 0.90    Filesys::Df****
>
> 3.64    HTML::Entities****
>
> 3.64    HTML::Parser****
>
> 3.57    HTML::TokeParser****
>
> 1.25    IO****
>
> 1.14    IO::File****
>
> 1.13    IO::Pipe****
>
> 2.04    Mail::Header****
>
> 1.89    Math::BigInt****
>
> 0.22    Math::BigRat****
>
> 3.08    MIME::Base64****
>
> 5.427   MIME::Decoder****
>
> 5.427   MIME::Decoder::UU****
>
> 5.427   MIME::Head****
>
> 5.427   MIME::Parser****
>
> 3.08    MIME::QuotedPrint****
>
> 5.427   MIME::Tools****
>
> 0.13    Net::CIDR****
>
> 1.25    Net::IP****
>
> 0.16    OLE::Storage_Lite****
>
> 1.04    Pod::Escapes****
>
> 3.13    Pod::Simple****
>
> 1.17    POSIX****
>
> 1.21    Scalar::Util****
>
> 1.82    Socket****
>
> 2.20    Storable****
>
> 1.4     Sys::Hostname::Long****
>
> 0.27    Sys::Syslog****
>
> 1.40    Test::Pod****
>
> 0.92    Test::Simple****
>
> 1.9721  Time::HiRes****
>
> 1.02    Time::localtime****
>
> ** **
>
> Optional module versions are:****
>
> 1.58    Archive::Tar****
>
> 0.23    bignum****
>
> missing Business::ISBN****
>
> missing Business::ISBN::Data****
>
> missing Data::Dump****
>
> 1.82    DB_File****
>
> 1.27    DBD::SQLite****
>
> 1.609   DBI****
>
> 1.16    Digest****
>
> 1.01    Digest::HMAC****
>
> 2.39    Digest::MD5****
>
> 2.12    Digest::SHA1****
>
> 1.01    Encode::Detect****
>
> 0.17015 Error****
>
> missing ExtUtils::CBuilder****
>
> 2.2203  ExtUtils::ParseXS****
>
> 2.38    Getopt::Long****
>
> 0.45    Inline****
>
> 1.08    IO::String****
>
> 1.09    IO::Zlib****
>
> 2.27    IP::Country****
>
> 0.29    Mail::ClamAV****
>
> 3.003001        Mail::SpamAssassin****
>
> missing Mail::SPF****
>
> missing Mail::SPF::Query****
>
> missing Module::Build****
>
> missing Net::CIDR::Lite****
>
> 0.65    Net::DNS****
>
> missing Net::DNS::Resolver::Programmable****
>
> missing Net::LDAP****
>
> 4.027  NetAddr::IP****
>
> missing Parse::RecDescent****
>
> missing SAVI****
>
> 3.17    Test::Harness****
>
> missing Test::Manifest****
>
> 2.0.0   Text::Balanced****
>
> 1.40    URI****
>
> 0.77    version****
>
> missing YAML****
>
> ** **
>
> ** **
>
> When I set action to store or any iteration of store my spam message stay
> in postfix hold queue and maillog just shows the following:****
>
> ** **
>
> May 10 09:38:00 filter01 postfix/smtpd[11712]: 24C2F1E1695: client=
> digitalsanctuary.com[174.37.94.132]****
>
> May 10 09:38:00 filter01 postfix/cleanup[11703]: 24C2F1E1695: hold: header
> Received: from mail.digitalsanctuary.com (digitalsanctuary.com[174.37.94.132])??by filter01..com (Postfix) with ESMTP id 24C2F1E1695??for
> <DQ at .com>; Fri, 10 May 2013 from digitalsanctuary.com[174.37.94.132];
> from=<f174532 at rmqkr.net> to=<DQ at .com> proto=ESMTP helo=<
> mail.digitalsanctuary.com>****
>
> May 10 09:38:00 filter01 postfix/cleanup[11703]: 24C2F1E1695: message-id=<
> 2046887021.4491368193076851.JavaMail.f174532 at rmqkr.net>****
>
> May 10 09:38:01 filter01 MailScanner[11656]: Message 24C2F1E1695.AAE16
> from 174.37.94.132 (f174532 at rmqkr.net) to.com is spam, SpamAssassin (not
> cached, score=4, required 2.5, BAYES_00 -1.00, LOCAL_DEMONSTRATION_FROM
> 5.00)****
>
> May 10 09:38:03 filter01 MailScanner[11656]: Spam Actions: message
> 24C2F1E1695.AAE16 actions are store-/var/spool/spam,header****
>
> May 10 09:41:01 filter01 MailScanner[11999]: Making attempt 2 at
> processing message 24C2F1E1695.AAE16****
>
> May 10 09:41:01 filter01 MailScanner[11999]: SpamAssassin cache hit for
> message 24C2F1E1695.AAE16****
>
> May 10 09:41:01 filter01 MailScanner[11999]: Message 24C2F1E1695.AAE16
> from 174.37.94.132 (f174532 at rmqkr.net) to.com is spam, SpamAssassin
> (cached, score=4, required 2.5, BAYES_00 -1.00, LOCAL_DEMONSTRATION_FROM
> 5.00)****
>
> May 10 09:41:01 filter01 MailScanner[11999]: Spam Actions: message
> 24C2F1E1695.AAE16 actions are store-/var/spool/spam,header****
>
> May 10 09:43:47 filter01 MailScanner[11762]: Making attempt 3 at
> processing message 24C2F1E1695.AAE16****
>
> May 10 09:43:47 filter01 MailScanner[11762]: SpamAssassin cache hit for
> message 24C2F1E1695.AAE16****
>
> May 10 09:43:47 filter01 MailScanner[11762]: Message 24C2F1E1695.AAE16
> from 174.37.94.132 (f174532 at rmqkr.net) to .com is spam, SpamAssassin
> (cached, score=4, required 2.5, BAYES_00 -1.00, LOCAL_DEMONSTRATION_FROM
> 5.00)****
>
> May 10 09:43:47 filter01 MailScanner[11762]: Spam Actions: message
> 24C2F1E1695.AAE16 actions are store-/var/spool/spam,header****
>
> May 10 09:48:16 filter01 MailScanner[12790]: Making attempt 4 at
> processing message 24C2F1E1695.AAE16****
>
> May 10 09:48:16 filter01 MailScanner[12790]: SpamAssassin cache hit for
> message 24C2F1E1695.AAE16****
>
> May 10 09:48:16 filter01 MailScanner[12790]: Message 24C2F1E1695.AAE16
> from 174.37.94.132 (f174532 at rmqkr.net) to .com is spam, SpamAssassin
> (cached, score=4, required 2.5, BAYES_00 -1.00, LOCAL_DEMONSTRATION_FROM
> 5.00)****
>
> May 10 09:48:16 filter01 MailScanner[12790]: Spam Actions: message
> 24C2F1E1695.AAE16 actions are store-/var/spool/spam,header****
>
> ** **
>
> Nothing else to indicate why it won’t store.  Any ideas?****
>
> ** **
> ------------------------------
>
> *Ronnie Smith* // Support Engineer
> rsmith at dynamicquest.com
> 336.389.4687****
>
> [image: Description: Dynamic Quest]****
>
> *IT Solutions  //  Business Consulting  //  Marketing  //  Data Center
> //  Software  //  Helpdesk*****
>
> ** **
>
> ** **
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130510/f8751dcb/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 6679 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130510/f8751dcb/attachment.jpe

More information about the MailScanner mailing list