Tagging the subject line of e-mail

[Ash]

Please forgive me the problem lay between the keyboard and back of chair
:-(. I missed Deliver Cleaned Messages was set to no I would say this
occured when I upgraded from v3.x and as we dont get many viruses I
never noticed, wrote a ruleset and it all works.

Have I made another mistake somewhere? the admin message is the same no
matter what problem it deteced.  "Warning: E-mail viruses detected"
appears for every violation and doesnt actually align with the problem
it detected, ie "Warning: Bad Filename detected" or Warning: Bad
Filetype detected" .

ash

Julian Field wrote:
> Can you give us an example of what you mean?
>
> At 04:54 01/09/2003, you wrote:
>
>> Did this ever get resolved?
>>
>> I just upgraded from 4.21-9 to 4.23-10 and nolonger get any of the
>> subject
>> line modifications notices that use the curly brackets, other than if
>> I set
>> "Scanned Modify Subject" , for example any violation be it a virus
>> ,bad file
>> name/type receives the subject line "Warning: E-mail viruses detected", I
>> haven't had a spam message yet to see if that notification has also
>> stopped
>> working
>>
>> from my conf file
>> Virus Modify Subject = yes
>> Virus Subject Text = {Virus?}
>> Filename Modify Subject = yes
>> Filename Subject Text = {Filename?}
>> Content Modify Subject = yes
>> Content Subject Text = {Dangerous Content?}
>> Spam Modify Subject = yes
>> Spam Subject Text = {Spam?}
>> High Scoring Spam Modify Subject = yes
>> High Scoring Spam Subject Text = {Spam?}
>>
>> running perl 5.6.0
>>
>> regards
>>
>> ash
>>
>> On Wed, 20 Aug 2003 07:41:27 -0400, Collins, Kevin
>> <KCollins at NESBITTENGINEERING.COM> wrote:
>>
>> >Mike,
>> >
>> >Thanks for responding.
>> >
>> >I'm planning on adding SpamAssassin later in the project.  Is it
>> required to
>> >make the system function as I want?  I didn't get that from the
>> >documentation.  They way I read the docs, SpamAssassin just improves
>> >MailScanner's abilities.
>> >
>> >Kevin
>> >
>> >> -----Original Message-----
>> >> From: Mike Kercher [mailto:mike at CAMAROSS.NET]
>> >> Sent: Tuesday, August 19, 2003 1:59 PM
>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>> >> Subject: Re: Tagging the subject line of e-mail
>> >>
>> >>
>> >> Are you using SpamAssassin?  If not, I'd HIGHLY recommend it!
>> >>  You can also
>> >> set Log Spam = yes and watch your maillog after restarting
>> >> MailScanner.
>> >>
>> >> Mike
>> >>
>> >>
>> >> -----Original Message-----
>> >> From: MailScanner mailing list
>> >> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
>> >> Of Collins, Kevin
>> >> Sent: Tuesday, August 19, 2003 12:31 PM
>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>> >> Subject: Tagging the subject line of e-mail
>> >>
>> >>
>> >> Hi!
>> >>
>> >> I've just completed installing MS v4.22-5 onto a Red Hat 8
>> >> machine to act as
>> >> my company's "SPAM Filter".  First, I want to say THANKS for
>> >> creating such a
>> >> project and for making it available to the masses for free.
>> >>
>> >> A little background:
>> >>
>> >> MailScanner machine:
>> >> Red Hat 8.0 (fully up2dated)
>> >> Sendmail 8.12.8
>> >> Perl 5.8.0
>> >> ClamAV 0.60 (compiled from source)
>> >> Sendmail set to relay everything to internal Exchange Server
>> >>
>> >> Everything seems to be working fine - I've even let a few e-mails pass
>> >> through the machine for testing.  Which is why I'm writing; I
>> >> now have a
>> >> question.
>> >>
>> >> First, of the 20 some odd messages that have passed through
>> >> MailScanner, it
>> >> has tagged 3 as SPAM and one of them as having a Virus
>> >> (actually it was an
>> >> HTML Form in the message).  The "Virus" message behaved as
>> >> expected - the
>> >> e-mail was deleted and not passed on and I got a notification of the
>> >> deletion.  But the remaining messages aren't working as I
>> >> expected them to
>> >> (I think).
>> >>
>> >> I've configured MailScanner to modify the subject line of
>> >> every e-mail it
>> >> touches to include {Scanned} at the beginning. (This is to
>> >> let me - and
>> >> everyone else - know that MS is working)  In addition I want all SPAM
>> >> messages flagged with {Spam} as the beginning of the subject line and
>> >> {Virus} for those that were found to have Viruses.
>> >>
>> >> To this point, all of the e-mail coming in (save the "Virus" message
>> >> mentioned above) have only had the word {Scanned} pre-pended
>> >> to the Subject
>> >> Line.  I've not seen the {Spam} label anywhere.  Here are the
>> >> (I think)
>> >> appropriate sections of the MailScanner.conf:
>> >>
>> >> --<snip>--
>> >> Scanned Modify Subject = start
>> >> Scanned Subject Text = {Scanned}
>> >> Virus Modify Subject = yes
>> >> Virus Subject Text = {Virus}
>> >> Filename Modify Subject = yes
>> >> Filename Subject Text = {Filename}
>> >> Spam Modify Subject = yes
>> >> Spam Subject Text = {Spam}
>> >> High Scoring Spam Modify Subject = yes
>> >> High Scoring Spam Subject Text = {Spam}
>> >> --<snip>--
>> >> Spam Checks = yes
>> >> Spam List = ORDB-RBL Infinite-Monkeys # MAPS-RBL+ costs money (except
>> >> .ac.uk)
>> >> Spam Domain List =
>> >> Spam Lists To Reach High Score = 5
>> >> Spam List Timeout = 10
>> >> Max Spam List Timeouts = 7
>> >> Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules
>> >> Is Definitely Spam = no
>> >> --<snip>--
>> >>
>> >> >From this, is my description of how MailScanner should work valid?
>> >> >Have I
>> >> forgot to do something?  What do I need to change/add/delete
>> >> to make it work
>> >> as I describe?
>> >>
>> >> Thanks in advance.
>> >>
>> >> --
>> >> Kevin L. Collins, MCSE
>> >> Systems Manager
>> >> Nesbitt Engineering, Inc.
>> >>
>
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support