Scanning Rules

[Kevin Spicer]

On Thu, 2003-06-05 at 17:43, Marco Obaid wrote:

>In my /etc/MailScanner/rules/virus.scanning.rules, I have set this:

>FromOrTo: avsmtp01.muw.edu no
>FromOrTo: default yes

>In my /etc/MailScanner/rules/spam.whitelist.rules, I have set this:

>FromOrTo: avsmtp01.muw.edu yes
>FromOrTo: default no

>Am I on the right track?!!!

Yes, but I think theres an easier way to do it - if I understand
correctly you want to turn off all processing for mails from avsmtp01.

You also say that you don't want to scan main coming from the
mailscanner machine [you do mean originating from don't you?] - unless
you actually have something on that machine generating a lot of mail its
probably best to scan it anyway - you never know.  I notice your rules
don't attempt to do this, so I shan't either.

You can do this with one entry in MailScanner.conf and one ruleset

MailScanner.conf...

Virus Scanning = /etc/MailScanner/rules/virus.scanning.rules

in /etc/MailScanner/rules/virus.scanning.rules

From:   x.x.x.x no
FromOrTo:       default yes

where x.x.x.x is the IP address of avsmtp01 - you should use the IP
address rather than host.domain.com syntax to avoid nasty spammers and
viruses getting round mailscanner by spoofing things.  You use From
rather than FromOrTo because you can only match IP addresses by origin
not destination.  If you also want to avoid scanning mail going to that
machine then add...

To:     avsmtp01.muw.edu no     no

to the ruleset above






BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.