how do you bypass virus scanning?
Ugo Bellavance
ugob at CAMO-ROUTE.COM
Fri Nov 14 17:00:12 GMT 2003
> -----Message d'origine-----
> De : Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
> Envoyé : Friday, November 14, 2003 6:26 AM
> À : MAILSCANNER at JISCMAIL.AC.UK
> Objet : Re: how do you bypass virus scanning?
>
>
> At 01:33 14/11/2003, you wrote:
> >Is there a way to configure MailScanner such that emails
> from a specific
> >address (or keyword in subject line) by-pass the *virus*
> scanner (but not
> >Spam Filter) for one specific email account on my system?
>
> Apply a ruleset to "Virus Scanning =".
> Read /etc/MailScanner/rules/* for examples and docs.
>
> Anyone out there fancy writing a little tutorial on rulesets please?
> This question must get asked about 5 times every day.
Hi,
I tried to write a simple tutorial for rules. Please correct me as I havent written tons of those, and english is not my mother tonge.
1-for every setting that says: "This can also be the
filename of a ruleset", you can create rules for specific
users, domain, network (from or to).
<ToDo> Any other actions or criterias (FromOrTo?)?
2-You just go to the setting you are looking for in /etc/MailScanner/MailScanner.conf. For example, lets' use the one called "High Scoring Spam Actions = ".
3-You put the path to the file of the ruleset you want to use (%rules-dir%/high.scoring.rules, for example.
4-You then create the file, and following the pattern in %rules-dir%/EXAMPLES, you build your rules. You enter your criterias on the left side (Ex. To: @domain.com) and you enter what actions you want on the right (forward user at domain.com). Don't forget to put a default entry. What you put on the right-hand side is what will replace the setting in MailScanner.conf, for this criteria.
5-Finally restart or reload MailScanner and test it out.
>
> >I found the docs on how to "whitelist" a send in regards to
> bypassing the
> >spam filter, but nothing on how to bypass the virus filter.
> >
> >Ideally, i want to make the exception for just ONE recipient
> on my system
> >for just ONE sender, but I will take any suggestions.
> >
> >Thanks!
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
More information about the MailScanner
mailing list