Rules for Virus Scanning
System Administration
rick at PRIS.CA
Fri Feb 21 23:41:53 GMT 2003
Hello Julian
thanks very much, that fixed everything up.
I also found the $file variable in the following EN reports
deleted.filename.message.txt
deleted.virus.message.txt
Rick
On Fri, 21 Feb 2003, Julian Field wrote:
> At 21:06 21/02/2003, you wrote:
> >Hello All
> >
> >I have recentley added a rule to the mailscanner config file telling
it
> >that if mail comes from a certain IP address to not bother scanning
it.
> >Upon checking the mail logs I have noticed the following error:
> > Config Error: Cannot match against destination IP address when
> > resolving configuration option "virusscan"
> >
> >The mailscanner config file looks like this:
> > Virus Scanning = /opt/MailScanner/etc/rules/viruscan.rules
> >
> >The rules file contains the following:
> >
> >FromTo: 12.129.199.61 no
> >FromTo: 63.161.60.29 no
> >FromTo: 63.161.60.61 no
> >FromTo: 63.161.60.93 no
> >FromTo: 63.211.220.125 no
> >FromTo: 216.35.189.221 no
> >FromTo: 216.148.222.61 no
> >FromTo: *@pris.ca yes
> >FromTo: *@pris.bc.ca yes
> >
> >When I don't use a ruleset, everything appears to work fine and I
don't
> >receive any errors. However I need the ruleset to prevent the
> >Mailscanner from scanning the same piece of mail twice.
>
> You cannot specify an IP address when matching "To" addresses. You
won't
> know what IP address the message is sent to until it has actually been
> delivered, by which time it's too late.
>
> So when specifying IP addresses in rules, you can only use "From:".
>
> >Another error I have noticed which does not have anything to do with
the
> >
> >above is the following:
> > Global symbol "$file" requires explicit package name at (eval
496)
> > line 1, <GEN1720> chunk 3.
> It looks like whoever wrote the Danish (dk) translations used "$file"
> instead of "$filename" in 4 of the files. They are
> /etc/MailScanner/reports/dk/deleted.filename.message.txt
> /etc/MailScanner/reports/dk/deleted.virus.message.txt
> /etc/MailScanner/reports/dk/stored.filename.message.txt
> /etc/MailScanner/reports/dk/stored.virus.message.txt
> This will be fixed in the next release.
>
> >Any and all help is most appreciated.
> >
> >Thank you
> >
> >Rick
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>
More information about the MailScanner
mailing list