how do you bypass virus scanning?

[Ugo Bellavance]

> 
> 
> As far as the FAQ is concerned, more is always better, so 
> long as it is all 
> correct.
> Please feel free to add things.

I know, but I asked twice to the list already to correct my tutorial and never got a respons, that's why I asked again.  I guess my tutorial is ok.  I'll put it in the FAQ's.

Ugo

> 
> At 04:52 15/11/2003, you wrote:
> > > -----Message d'origine-----
> > > De : Rusty W [mailto:rusty at EYTCHISONGROUP.COM]
> > > Envoyé : Friday, November 14, 2003 8:52 PM
> > > À : MAILSCANNER at JISCMAIL.AC.UK
> > > Objet : Re: how do you bypass virus scanning?
> > >
> > >
> > > >> -----Message d'origine-----
> > > >> De : Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
> > > >> Envoyé : Friday, November 14, 2003 6:26 AM
> > > >> À : MAILSCANNER at JISCMAIL.AC.UK
> > > >> Objet : Re: how do you bypass virus scanning?
> > > >>
> > > >>
> > > >> At 01:33 14/11/2003, you wrote:
> > > >> >Is there a way to configure MailScanner such that emails
> > > >> from a specific
> > > >> >address (or keyword in subject line) by-pass the *virus*
> > > >> scanner (but not
> > > >> >Spam Filter) for one specific email account on my system?
> > > >>
> > > >> Apply a ruleset to "Virus Scanning =".
> > > >> Read /etc/MailScanner/rules/* for examples and docs.
> > > >>
> > > >> Anyone out there fancy writing a little tutorial on
> > > rulesets please?
> > > >> This question must get asked about 5 times every day.
> > > >
> > > > Hi,
> > > >
> > > >         I tried to write a simple tutorial for rules.
> > > Please correct me
> > > > as I havent written tons of those, and english is not my mother
> > > > tonge.
> > > >
> > > > 1-for every setting that says: "This can also be the
> > > > filename of a ruleset", you can create rules for specific
> > > > users, domain, network (from or to).
> > > >
> > > > <ToDo> Any other actions or criterias (FromOrTo?)?
> > > >
> > > > 2-You just go to the setting you are looking for in
> > > > /etc/MailScanner/MailScanner.conf.  For example, lets' use
> > > the one called
> > > > "High Scoring Spam Actions = ".
> > > >
> > > > 3-You put the path to the file of the ruleset you want to use
> > > > (%rules-dir%/high.scoring.rules, for example.
> > > >
> > > > 4-You then create the file, and following the pattern in
> > > > %rules-dir%/EXAMPLES, you build your rules.  You enter your
> > > criterias on
> > > > the left side (Ex. To: @domain.com) and you enter what
> > > actions you want on
> > > > the right (forward user at domain.com). Don't forget to put a
> > > default entry.
> > > > What you put on the right-hand side is what will replace
> > > the setting in
> > > > MailScanner.conf, for this criteria.
> > > >
> > > > 5-Finally restart or reload MailScanner and test it out.
> > > >
> > > >
> > > >
> > > >>
> > > >> >I found the docs on how to "whitelist" a send in regards to
> > > >> bypassing the
> > > >> >spam filter, but nothing on how to bypass the virus filter.
> > > >> >
> > > >> >Ideally, i want to make the exception for just ONE recipient
> > > >> on my system
> > > >> >for just ONE sender, but I will take any suggestions.
> > > >> >
> > > >> >Thanks!
> > > >>
> > > >> --
> > > >> Julian Field
> > > >> www.MailScanner.info
> > > >> MailScanner thanks transtec Computers for their support
> > > >>
> > > >> PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 
> 5947 1415 B654
> > > >>
> > > >
> > >
> > > Julian/Ugo,
> > >
> > > Thanks for the input. I browsed the archives and didn't see
> > > this question
> > > - perhaps i didn't look hard enough.
> > >
> > > I know about rule-sets, i have written some *very* simple
> > > ones for how to
> > > hanlde spam. I have *no idea* why it didn't occur to me to
> > > write one for
> > > "Virus Scanning".
> > >
> > > Thanks for the "jump-start" to get my brain going again! ;-)
> > >
> > > Rusty
> > >
> >
> >Hi.
> >
> >Do you think I should put that up in the FAQ?  -Anyone?
> >
> >Thanks
> >
> >Ugo
> 
> -- 
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
>