how do you bypass virus scanning?

Julian Field mailscanner at ecs.soton.ac.uk
Sat Nov 15 11:33:00 GMT 2003


As far as the FAQ is concerned, more is always better, so long as it is all 
correct.
Please feel free to add things.

At 04:52 15/11/2003, you wrote:
> > -----Message d'origine-----
> > De : Rusty W [mailto:rusty at EYTCHISONGROUP.COM]
> > Envoyé : Friday, November 14, 2003 8:52 PM
> > À : MAILSCANNER at JISCMAIL.AC.UK
> > Objet : Re: how do you bypass virus scanning?
> >
> >
> > >> -----Message d'origine-----
> > >> De : Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
> > >> Envoyé : Friday, November 14, 2003 6:26 AM
> > >> À : MAILSCANNER at JISCMAIL.AC.UK
> > >> Objet : Re: how do you bypass virus scanning?
> > >>
> > >>
> > >> At 01:33 14/11/2003, you wrote:
> > >> >Is there a way to configure MailScanner such that emails
> > >> from a specific
> > >> >address (or keyword in subject line) by-pass the *virus*
> > >> scanner (but not
> > >> >Spam Filter) for one specific email account on my system?
> > >>
> > >> Apply a ruleset to "Virus Scanning =".
> > >> Read /etc/MailScanner/rules/* for examples and docs.
> > >>
> > >> Anyone out there fancy writing a little tutorial on
> > rulesets please?
> > >> This question must get asked about 5 times every day.
> > >
> > > Hi,
> > >
> > >         I tried to write a simple tutorial for rules.
> > Please correct me
> > > as I havent written tons of those, and english is not my mother
> > > tonge.
> > >
> > > 1-for every setting that says: "This can also be the
> > > filename of a ruleset", you can create rules for specific
> > > users, domain, network (from or to).
> > >
> > > <ToDo> Any other actions or criterias (FromOrTo?)?
> > >
> > > 2-You just go to the setting you are looking for in
> > > /etc/MailScanner/MailScanner.conf.  For example, lets' use
> > the one called
> > > "High Scoring Spam Actions = ".
> > >
> > > 3-You put the path to the file of the ruleset you want to use
> > > (%rules-dir%/high.scoring.rules, for example.
> > >
> > > 4-You then create the file, and following the pattern in
> > > %rules-dir%/EXAMPLES, you build your rules.  You enter your
> > criterias on
> > > the left side (Ex. To: @domain.com) and you enter what
> > actions you want on
> > > the right (forward user at domain.com). Don't forget to put a
> > default entry.
> > > What you put on the right-hand side is what will replace
> > the setting in
> > > MailScanner.conf, for this criteria.
> > >
> > > 5-Finally restart or reload MailScanner and test it out.
> > >
> > >
> > >
> > >>
> > >> >I found the docs on how to "whitelist" a send in regards to
> > >> bypassing the
> > >> >spam filter, but nothing on how to bypass the virus filter.
> > >> >
> > >> >Ideally, i want to make the exception for just ONE recipient
> > >> on my system
> > >> >for just ONE sender, but I will take any suggestions.
> > >> >
> > >> >Thanks!
> > >>
> > >> --
> > >> Julian Field
> > >> www.MailScanner.info
> > >> MailScanner thanks transtec Computers for their support
> > >>
> > >> PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
> > >>
> > >
> >
> > Julian/Ugo,
> >
> > Thanks for the input. I browsed the archives and didn't see
> > this question
> > - perhaps i didn't look hard enough.
> >
> > I know about rule-sets, i have written some *very* simple
> > ones for how to
> > hanlde spam. I have *no idea* why it didn't occur to me to
> > write one for
> > "Virus Scanning".
> >
> > Thanks for the "jump-start" to get my brain going again! ;-)
> >
> > Rusty
> >
>
>Hi.
>
>Do you think I should put that up in the FAQ?  -Anyone?
>
>Thanks
>
>Ugo

-- 
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654




More information about the MailScanner mailing list