Per User Blacklist and white lists

[Mike Williams]

Ok, this is what I got.

X-MailScanner-1: Found to be clean
X-MailScanner-SpamCheck-1: spam (blacklisted)
X-MailScanner-SpamScore: ssssssssssssssssssss

It didn't get caught by the high score rule or even the required score rule.
I have my required score set at 3 and high at 9.  I set the value at 20 so
it should have scored. I checked the required score with a value of 5 also
with the same results.

Mike

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Julian Field
Sent: Wednesday, March 12, 2003 2:19 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Per User Blacklist and white lists


At 19:47 12/03/2003, you wrote:
>Works like a charm.  Thanks.

Great. It will be in the next release.

>   BTW quick question is there a way to assign a
>spam score to blacklisted addresses so that it will activate the high score
>rule?

Not currently, no. But try this:
1) In the blacklisting lookup code, change the code to say this:

sub ByDomainSpamBlacklist {
   my($message) = @_;
   my($value);
   $value = LookupByDomainList($message, \%Blacklist);
   $message->{sascore} = 10 if $value;
   return $value;
}

(if you want blacklisting to score 10)

Then edit Message.pm and change line 370 from
   $this->{sascore} = $sascore; # Save the actual figure for use later...
to
   $this->{sascore} += $sascore; # Save the actual figure for use later...

Give this a try and let me know how you get on.

>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>Behalf Of Julian Field
>Sent: Wednesday, March 12, 2003 12:19 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Per User Blacklist and white lists
>
>
>Looks like I never wrote the code to do the per-user lists, only per-domain
>lists.
>
>Try editing CustomConfig.pm and making "LookupByDomainList" look like this:
>
>sub LookupByDomainList {
>    my($message, $BlackWhite) = @_;
>
>    return 0 unless $message; # Sanity check the input
>
>    # Find the "from" address and the first "to" address
>    my($from, $fromdomain, @todomain, $todomain, @to, $to, $ip);
>    $from       = $message->{from};
>    $fromdomain = $message->{fromdomain};
>    @todomain   = @{$message->{todomain}};
>    $todomain   = $todomain[0];
>    @to         = @{$message->{to}};
>    $to         = $to[0];
>    $ip         = $message->{clientip};
>
>    # It is in the list if either the exact address is listed,
>    # or the domain is listed
>    return 1 if $BlackWhite->{$to}{$from};
>    return 1 if $BlackWhite->{$to}{$fromdomain};
>    return 1 if $BlackWhite->{$to}{$ip};
>    return 1 if $BlackWhite->{$todomain}{$from};
>    return 1 if $BlackWhite->{$todomain}{$fromdomain};
>    return 1 if $BlackWhite->{$todomain}{$ip};
>
>    # It is not in the list
>    return 0;
>}
>
>Please give this a try and let me know if it works, so I can include the
>code in the next release (due very shortly  to fix long filename checking
>bug in 4.13).
>
>At 17:48 12/03/2003, you wrote:
> >Ok, I enabled the bydoaminblacklist and bydoaminwhitelist in the
> >MailScanner.conf with
> >
> >Is Definitely Not Spam = &ByDomainSpamWhitelist
> >Is Definitely Spam     = &ByDomainSpamBlacklist
> >
> >The directorys are set to /etc/MailScanner/rules/whitelist and
> >/etc/MailScanner/rules/blacklist.  I have a file in blacklist folder
named
> >user at domain.com (actual file name is different but same format).  In the
> >file user at domain.com I have listed several blacklist items, one is an
email
> >account that I have on aol.com.  The aol email address doesn't appear in
>any
> >whitelist.  However, when I send email to user at domain.com from the AOL
> >account that is on the blacklist it goes through without even being
marked
> >as spam.  There are no errors when starting mailscanner and in the  logs
is
> >says that it read blacklist for 1 domain.  I must be missing something
but
>I
> >haven't a clue.
> >
> >Mike
> >-----Original Message-----
> >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> >Behalf Of Julian Field
> >Sent: Tuesday, March 11, 2003 2:24 PM
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Re: Per User Blacklist and white lists
> >
> >
> >At 19:50 11/03/2003, you wrote:
> > >Julian,
> > >
> > >Thanks for the info.  I'm looking at the code and the example is for
> > >bydomain.  I'm not sure but it looks like I can have the white and
black
> > >list by either domain.com or by user at domain.com.
> >
> >Yes you can. You can even give it IP addresses if I remember rightly.
> >
> > >   The reason I am asking is
> > >that each user will need to be able to specify their own black and
white
> > >list.  This makes it possible that one user would wish to block email
>from
> >a
> > >user at spam.com  and another user to whitelist or not block a
>user at spam.com.
> > >So if I use a filename of user1 at domain.com and user2 at domain.com does
this
> >in
> > >fact make the whitelist and blacklist unique for each user even if they
>are
> > >in the same domain?
> > >
> > >Mike
> > >
> > >-----Original Message-----
> > >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > >Behalf Of Julian Field
> > >Sent: Tuesday, March 11, 2003 12:44 PM
> > >To: MAILSCANNER at JISCMAIL.AC.UK
> > >Subject: Re: Per User Blacklist and white lists
> > >
> > >
> > >Take a look in the CustomConfig.pm file in recent distributions. This
> > >feature is an example of what you can do with "Custom Functions". You
>will
> > >probably need to change the directories it reads the black/whitelists
>from,
> > >but otherwise it will just work. The code briefly explains what should
go
> > >in the various config files.
> > >
> > >At 18:35 11/03/2003, you wrote:
> > > >Is it possible to have a per user blacklist and whitelist?  Example
in
> >the
> > > >whitelist file:
> > > >
> > > >To:     user-1 at domain.com
> > >/etc/MailScanner/rules/whitelist/user-1-domain.com
> > > >To:     user-2 at domain.com
> > >/etc/MailScanner/rules/whitelist/user-2-domain.com
> > > >FromTo: Default no
> > > >
> > > >
> > > >user-1-domain.com
> > > >
> > > >From: friend at domain.com yes
> > > >From: friend1 at domain.com yes
> > > >From: default no
> > > >
> > > >and so on?
> > > >
> > > >Mike
> > >
> > >--
> > >Julian Field
> > >www.MailScanner.info
> > >Professional Support Services at www.MailScanner.biz
> > >MailScanner thanks transtec Computers for their support
> >
> >--
> >Julian Field
> >www.MailScanner.info
> >Professional Support Services at www.MailScanner.biz
> >MailScanner thanks transtec Computers for their support
>
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support