How do i prevent alerts being delivered to specific addresses?

[James Gray]

<x-flowed>
David J. Duffner - NWCWEB.com wrote:
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of James Gray
>>Sent: Sunday, August 22, 2004 5:39 PM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: How do i prevent alerts being delivered to specific addresses?
>>
>>
>>SO, my question to this group is how (the hell) do I tell
>>MailScanner to
>>silently drop virus/spam/bad attachments addressed to the
>>ticket system?
>>No alerts, no warnings, no modifying the message, just drop it.
>>
>>I've put a few rules in place but obviously these aren't working as
>>expected.  Can someone give me the MailScanner.conf settings I need to
>>put into a rule set??
>>
>>Cheers,
>>
>>James
>>_____________________________
>>I.T. Manager - Asia Region
>>Open Channel Solutions
>>Sydney NSW 2000, Australia
>
>
>
>         What about whitelisting the address in question that
> accepts the mail, but only use From: instead of FromOrTo: so that
> anything inbound is handled normally, but anything that account
> sends out is essentially ignored and not processed?  This would
> be in the allow_hosts file.  We use the same method on a few of
> our in-house accounts to prevent similar issues and additional
> load times on MailScanner processing stuff that really doesn't
> matter if it's caught/tagged, etc.
>
>         Just a thought!
>
>       David J. Duffner
>       VP Operations
>       NWC Corporation

Thanks for the suggestion David.  The problem is we want to protect this
account from spam/viruses/etc but don't want to know when MailScanner
traps something (the Postmaster is notified of all viruses and blocked
content anyway, and spam is logged, so we have an audit trail "just in
case").  I've set up a couple of rules for spam actions, delivery of
cleaned/disinfected messages etc, to simple delete/no etc, (whatever is
relevant for the rule set).  But MailScanner still sends an alert for
viruses and blocked content to the original recipient.

The sequence seems to be (incoming mail addressed to foo at example.com):

Mail -> MailScanner -> MailScanner sends alert to foo at example.com to let
              |         them know it deleted/quarantined a virus etc.
              V
          Rule says delete
          virused mail or
          blocked content
          to this recipient.

What I *want* to happen is (incoming mail addressed to foo at example.com):

Mail -> MailScanner -> Rule says DON'T *this* notify recipient.
             |
             V
          Rule says drop
          this type of message:
          (as above)

This way our trouble ticket system doesn't generate a couple of dozen
bogus cases a day with warnings about quarantined/deleted content :)

For the moment we run a daily SQL script to dump all the cases
"generated" by MailScanner notifications, but I'd really like to stop it
at the cause, not clean up the effect.

Cheers,

James
_____________________________
I.T. Manager - Asia Region
Open Channel Solutions
Sydney NSW 2000, Australia

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>