Questions about how MailScanner deals with mails to be quarantined

[James Ogley]

Hi,

As the annoying auto-append will reveal, we're currently using
MAILSweeper, but we're evaluating MailScanner as a replacement.  We
really like the functionality of MAILSweeper, but equally dislike the
implementation.

We're running MS 4.25-13 on SuSE 8.2 on our test machine, and we've been
sending various test mails though it, to see how it dealt with them.

Basically, our requirements would be to be able to quarantine mails
because of being too large, virus-laden, with attachments of various
types.

Once a mail is quarantined, we would like to have the option to notify
three groups of people, the sender, the recipient and the admin,
depending on the reason the mail had been quarantined.

Our testing of quarantining large mails threw up some confusion, as the
mails from MS always said that the mails had been stopped as virii,
which was not the case, however it seems to be that it says that
irrespective of the actual reason in the mails to the admin, which could
cause confusion.  It would be better if a different notification mail
could be sent according to why the mail had been stopped (ie, "this mail
is too large", "this mail had an executable file attached", "this mail
has a script attached").

Also, we would prefer to be able to notify the recipient, rather than
delivering a 'disinfected' version of the mail to them, something like
"you have been sent a mail that exceeds size limitations by
foo at bar.baz.  If this mail is for business purposes, please contact
systems admin".

Have I totally misunderstood the way MS deals with mails, and these
options are possible? (I hope so)

I can provide my MailScanner.conf if that will be helpful.

James
--
James Ogley, Unix Systems Administrator, Pinnacle Insurance Plc
Work: james.ogley at pinnacle.co.uk www.pinnacle.co.uk +44 (0) 20 8731 3619
Personal: james at rubberturnip.org.uk www.rubberturnip.org.uk
Updated GNOME RPMs for SuSE Linux: www.usr-local-bin.org


***********************************************************************
CONFIDENTIALITY. This e-mail and any attachments are
confidential and may also be privileged. If you are not the
named recipient, please notify the sender immediately and
do not disclose the contents to another person, use it for any
purpose, or store or copy the information in any medium. Any
views expressed in this message are those of the individual
sender, except where the sender specifically states them to
be the views of Pinnacle Insurance Plc.

If you have received this e-mail in error please immediately
notify our Helpdesk on +44 (0) 20 8207 9555.

This footnote also confirms that this email message has been
swept by MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************