Sendmail before MailScanner

[Radu IONESCU]

Yet, this is my problem too. I wish MailScanner would be able to handle. Our
gateway accepts daily thousands of messages, just to receive in turn a 550
user unknown from the internal mail hubs. This messages are generated in our
case by SPAM, pretending to be generated by our university domain...

The best would be to reject the message before enters the queue, but this is
a Sendmail problem I can hardly handle (LDAP routing?).
However, a rule something like this would help a lot:
drop all messages containing in the body a line with
"Received: from ...unitbv.ro" and not "(193.254.23"
would stop the chain reaction for each of this messages (thousands of
postmaster notify, returned message, etc. in the root mailbox).
Can this be put in sendmail "acces" db? Or in  SpamAssassin's?
Thank you,

Radu IONESCU
Sys Mgr, Univ TRANSILVANIA Brasov





> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Didier Belhomme
> Sent: 5 martie 2003 21:46
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Sendmail before MailScanner
>
>
> Selon Daron <lists at DILLONST.COM>:
>
> > I have notice that MailScanner ignores Sendmail rules before
> scanning. The
> > problem is tons of non-existant users receiving mail gets scanned and
> > processed even though in sendmail aliases file they are set to
> /dev/nul .
>
> I hope this is /dev/null...
>
> That's a common mistake to think that Sendmail, as Mail Transfert
> Agent, is
> responsible for delivering the message. That's wrong : alias
> expansion is the
> responsability of the Mail Delivery Agent, which is another program
> like "deliver" or "procmail". Thus, I dont't think that the
> Sendmail process
> that is located *before* MailScanner should be modified in a way
> to support
> alias expansion. What is correct would be to use the "access" database in
> Sendmail in order to reject mail if matching a rule.
>
> > Is there a place in the config to adjust this?
>
>
> --
> Didier Belhomme
> FUNDP - SIU
> Unix Systems Manager
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> Mailscanner thanks transtec Computers for their support.
>