how do you bypass virus scanning?

[Ugo Bellavance]

Here is the address for the ruleset tutorial.  Feel free to add stuff.

http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/230.html

hth
Ugo

> -----Message d'origine-----
> De : Ugo Bellavance 
> Envoyé : Saturday, November 15, 2003 9:32 AM
> À : MAILSCANNER at JISCMAIL.AC.UK
> Objet : Re: how do you bypass virus scanning?
> 
> 
> > 
> > 
> > As far as the FAQ is concerned, more is always better, so 
> > long as it is all 
> > correct.
> > Please feel free to add things.
> 
> I know, but I asked twice to the list already to correct my 
> tutorial and never got a respons, that's why I asked again.  
> I guess my tutorial is ok.  I'll put it in the FAQ's.
> 
> Ugo
> 
> > 
> > At 04:52 15/11/2003, you wrote:
> > > > -----Message d'origine-----
> > > > De : Rusty W [mailto:rusty at EYTCHISONGROUP.COM]
> > > > Envoyé : Friday, November 14, 2003 8:52 PM
> > > > À : MAILSCANNER at JISCMAIL.AC.UK
> > > > Objet : Re: how do you bypass virus scanning?
> > > >
> > > >
> > > > >> -----Message d'origine-----
> > > > >> De : Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
> > > > >> Envoyé : Friday, November 14, 2003 6:26 AM
> > > > >> À : MAILSCANNER at JISCMAIL.AC.UK
> > > > >> Objet : Re: how do you bypass virus scanning?
> > > > >>
> > > > >>
> > > > >> At 01:33 14/11/2003, you wrote:
> > > > >> >Is there a way to configure MailScanner such that emails
> > > > >> from a specific
> > > > >> >address (or keyword in subject line) by-pass the *virus*
> > > > >> scanner (but not
> > > > >> >Spam Filter) for one specific email account on my system?
> > > > >>
> > > > >> Apply a ruleset to "Virus Scanning =".
> > > > >> Read /etc/MailScanner/rules/* for examples and docs.
> > > > >>
> > > > >> Anyone out there fancy writing a little tutorial on
> > > > rulesets please?
> > > > >> This question must get asked about 5 times every day.
> > > > >
> > > > > Hi,
> > > > >
> > > > >         I tried to write a simple tutorial for rules.
> > > > Please correct me
> > > > > as I havent written tons of those, and english is not 
> my mother
> > > > > tonge.
> > > > >
> > > > > 1-for every setting that says: "This can also be the
> > > > > filename of a ruleset", you can create rules for specific
> > > > > users, domain, network (from or to).
> > > > >
> > > > > <ToDo> Any other actions or criterias (FromOrTo?)?
> > > > >
> > > > > 2-You just go to the setting you are looking for in
> > > > > /etc/MailScanner/MailScanner.conf.  For example, lets' use
> > > > the one called
> > > > > "High Scoring Spam Actions = ".
> > > > >
> > > > > 3-You put the path to the file of the ruleset you want to use
> > > > > (%rules-dir%/high.scoring.rules, for example.
> > > > >
> > > > > 4-You then create the file, and following the pattern in
> > > > > %rules-dir%/EXAMPLES, you build your rules.  You enter your
> > > > criterias on
> > > > > the left side (Ex. To: @domain.com) and you enter what
> > > > actions you want on
> > > > > the right (forward user at domain.com). Don't forget to put a
> > > > default entry.
> > > > > What you put on the right-hand side is what will replace
> > > > the setting in
> > > > > MailScanner.conf, for this criteria.
> > > > >
> > > > > 5-Finally restart or reload MailScanner and test it out.
> > > > >
> > > > >
> > > > >
> > > > >>
> > > > >> >I found the docs on how to "whitelist" a send in regards to
> > > > >> bypassing the
> > > > >> >spam filter, but nothing on how to bypass the virus filter.
> > > > >> >
> > > > >> >Ideally, i want to make the exception for just ONE recipient
> > > > >> on my system
> > > > >> >for just ONE sender, but I will take any suggestions.
> > > > >> >
> > > > >> >Thanks!
> > > > >>
> > > > >> --
> > > > >> Julian Field
> > > > >> www.MailScanner.info
> > > > >> MailScanner thanks transtec Computers for their support
> > > > >>
> > > > >> PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 
> > 5947 1415 B654
> > > > >>
> > > > >
> > > >
> > > > Julian/Ugo,
> > > >
> > > > Thanks for the input. I browsed the archives and didn't see
> > > > this question
> > > > - perhaps i didn't look hard enough.
> > > >
> > > > I know about rule-sets, i have written some *very* simple
> > > > ones for how to
> > > > hanlde spam. I have *no idea* why it didn't occur to me to
> > > > write one for
> > > > "Virus Scanning".
> > > >
> > > > Thanks for the "jump-start" to get my brain going again! ;-)
> > > >
> > > > Rusty
> > > >
> > >
> > >Hi.
> > >
> > >Do you think I should put that up in the FAQ?  -Anyone?
> > >
> > >Thanks
> > >
> > >Ugo
> > 
> > -- 
> > Julian Field
> > www.MailScanner.info
> > Professional Support Services at www.MailScanner.biz
> > MailScanner thanks transtec Computers for their support
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
> > 
>