Rules for Virus Scanning

System Administration rick at PRIS.CA
Fri Feb 21 23:41:53 GMT 2003


Hello Julian

thanks very much, that fixed everything up.

I also found the $file variable in the following EN reports
        deleted.filename.message.txt
        deleted.virus.message.txt

Rick

On Fri, 21 Feb 2003, Julian Field wrote:

> At 21:06 21/02/2003, you wrote:
> >Hello All
> >
> >I have recentley added a rule to the mailscanner config file telling
it
> >that if mail comes from a certain IP address to not bother scanning
it.
> >Upon checking the mail logs I have noticed the following error:
> >     Config Error: Cannot match against  destination IP address when
> >     resolving configuration option  "virusscan"
> >
> >The mailscanner config file looks like this:
> >     Virus Scanning = /opt/MailScanner/etc/rules/viruscan.rules
> >
> >The rules file contains the following:
> >
> >FromTo: 12.129.199.61   no
> >FromTo: 63.161.60.29    no
> >FromTo: 63.161.60.61    no
> >FromTo: 63.161.60.93    no
> >FromTo: 63.211.220.125  no
> >FromTo: 216.35.189.221  no
> >FromTo: 216.148.222.61  no
> >FromTo: *@pris.ca       yes
> >FromTo: *@pris.bc.ca    yes
> >
> >When I don't use a ruleset, everything appears to work fine and I
don't
> >receive any errors. However I need the ruleset to prevent the
> >Mailscanner from scanning the same piece of mail twice.
>
> You cannot specify an IP address when matching "To" addresses. You
won't
> know what IP address the message is sent to until it has actually been

> delivered, by which time it's too late.
>
> So when specifying IP addresses in rules, you can only use "From:".
>
> >Another error I have noticed which does not have anything to do with
the
> >
> >above is the following:
> >     Global symbol "$file" requires explicit package name at (eval
496)
> >     line 1, <GEN1720> chunk 3.
> It looks like whoever wrote the Danish (dk) translations used "$file"
> instead of "$filename" in 4 of the files. They are
>          /etc/MailScanner/reports/dk/deleted.filename.message.txt
>          /etc/MailScanner/reports/dk/deleted.virus.message.txt
>          /etc/MailScanner/reports/dk/stored.filename.message.txt
>          /etc/MailScanner/reports/dk/stored.virus.message.txt
> This will be fixed in the next release.
>
> >Any and all help is most appreciated.
> >
> >Thank you
> >
> >Rick
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>



More information about the MailScanner mailing list