Scanning By Domain

[Quentin Campbell]

> -----Original Message-----
> From: Schiltz Luc [mailto:becher at web.lu] 
> Sent: 21 February 2002 12:34
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Scanning By Domain
> 
> 
> Hi,
> 
> is there no way to exclude domains from being scanned
> as we host around 400-500 sites per server and instead of 
> including them all in the file it would be great if one could 
> exclude domain names from being scanned by just adding them to a file
[snip]

There is an even stronger argument for reversing the logic of Scanning
by Domain and that is the security implications of inadvertently
allowing unscanned mail through without realising it.

This will arise if the Scanning by Domain option is in effect and the
Sys Admin forgets to add a domain (to be scanned) to the
domains.to.scan.conf file.

The Scanning by Domain option should "fail safe". That is, it should
scan every domain *except* those you explicitly ask it not to scan.

Apart from cutting down the size of the file at sites where all but a
few domains are scanned, it would protect the negligent or forgetful Sys
Admin from himself!    :-) 

Quentin
---
PHONE: +44 191 222 8209    Computing Service, University of Newcastle
FAX:   +44 191 222 8765    Newcastle upon Tyne, United Kingdom, NE1 7RU.
------------------------------------------------------------------------
"Any opinion expressed above is mine. The University can get its own."