Mails misclassified from vBulletin Forum Software

[Noel Jones]

On 9/10/2014 8:35 AM, Joerg Rohrer wrote:
> Thanks Adreas
> 
> On 10-09-2014 13:23, A. Schulze wrote:
>> Joerg Rohrer:
>>
>>> Any ideas were i could start debugging?
>> set $log_level = 5;
>>
>> if impossible ( too much log ) try @debug_sender_maps or
>> @debug_recipient_maps
>>
>> Andreas
> 
> Below the relevant part.
> 
...

> Sep 10 15:21:00 alpha amavis[8825]: (08825-01) result line from
> file(1): p001: Python script, UTF-8 Unicode text executable\n
> Sep 10 15:21:00 alpha amavis[8825]: (08825-01) lookup_re("Python
> script, UTF-8 Unicode text executable") matches key
> "(?^i:\bexecutable\b)", result="exe"
> Sep 10 15:21:00 alpha amavis[8825]: (08825-01) lookup
> [map_full_type_to_short_type] => true,  "Python script, UTF-8
> Unicode text executable" matches, result="exe",
> matching_key="(?^i:\134bexecutable\134b)"

The file(1) system command thinks the mail contains a Python script.

Assuming the mail doesn't /really/ contain a Python script, your
choices are:
- see if there is an update for the file system command so it
doesn't mis-classify this mail.
- whitelist "Python script" in your amavisd.conf banned list (see
comments in amavisd.conf or amavisd.conf-sample for instructions).




  -- Noel Jones