<br>Hi,<br>Now I Found the Root cause for problem:<br><br>- We are adding DNSWL header to mails for classifying senders server <br><br>header is added like this ( head of message file )<br><br>X-Organisation-Whitelist: No<br>
Received: from [ip.add.re.ss] (unknown [ip.add.re.ss])<br> by host (Postfix) with ESMTP id 95876A78057<br><br>Because message file starts with string other than "received"<br>it is assumed as ASCII file, then MailWatch handles it differently...<br>
<br>Header should be added somewhere else in headers - if possible, or MailWatch release script<br>changed...<br><br><br><br><div class="gmail_quote">2011/2/25 Martin Hepworth <span dir="ltr"><<a href="mailto:maxsec@gmail.com">maxsec@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">So what does 'message' actually look like? <br><br>rfc822 is very text like, perhaps the 'file' command is throwing an incorrect result. What happens if you copy the file to the old server and run 'file' and what happens with the output of 'file' if you copy a file from the old server to the new?<br clear="all">
<br><br>-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote"><div><div></div><div class="h5">On 25 February 2011 08:05, ms fin <span dir="ltr"><<a href="mailto:ms.fin11@gmail.com" target="_blank">ms.fin11@gmail.com</a>></span> wrote:<br></div>
</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div><div></div><div class="h5">
<div class="gmail_quote">Hi,<br><br>I Have CentOS 5.5 with Postfix<br>MailScanner-4.81.4-1 and mailwatch-1.0.5<br>installed. Everything is working fine except:<br><br>When MailScanner quarantines a message, for example<br>
<br>/var/spool/MailScanner/quarantine/20110224/95876A78057.AFA98/<br>
<br>-rw-rw---- 1 postfix www 38400 Feb 24 13:06 message<br>-rw-rw---- 1 postfix www 27648 Feb 24 13:06 testi.txt.doc<br><br>filetype on "message" file is: ASCII mail text ( checked with file command )<br><br>
My MailScanner.conf are here:<br>
<br>Quarantine Dir = /var/spool/MailScanner/quarantine<br>Quarantine User = root<br>Quarantine Group = www<br>Quarantine Permissions = 0770<br>Quarantine Infections = yes<br>Quarantine Modified Body = no<br>Quarantine Whole Message = yes<br>
Quarantine Whole Messages As Queue Files = no<br><br>To be able to release message it should be format: message/rfc822<br><br>---<br><br>I Have a older production server and in that quarantined message-files are in correct file format.<br>
I have triple checked all my config files and I do not find any reason why....<br><br>Could someone help ?<br><br>Rgds, Roger<br><br><br>
</div><br>
<br></div></div>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>