Rule to allow internal zip files/block external

Julian Field mailscanner at ecs.soton.ac.uk
Mon Feb 9 20:08:42 GMT 2004


At 16:35 09/02/2004, you wrote:
>I am currently running MS 4.26.7, SA 2.63.1, on red hat 9.0.  Because of
>the recent flood of *.zip attachment viruses we currently block all the
>standard attachments as well as all zip attachments.  Is there a way to
>allow to local users to send zip files within our local site, while still
>blocking external zip attachments from entering our system?

Use a ruleset to point at different filename.rules.conf files.
First ban zip files in your main filename.rules.conf file. Copy one of the
other deny lines and put it right near the top of the file. Make sure the 4
sections of the line are separated with tabs and not spaces.
Then copy the file to filename.allowzip.rules.conf. Change the deny zip to
allow zip (use one of the other allow lines as a template). Make sure it's
near the top of the file so gets acted on very early.
Then create a ruleset in /etc/MailScanner/rules/filenameconf.rules
FromAndTo:      yourdomain.com  /etc/MailScanner/filename.allowzip.rules.conf
FromOrTo:       default                 /etc/MailScanner/filename.rules.conf

Finally, in /etc/MailScanner.conf, put this
Filename Rules = /etc/MailScanner/rules/filenameconf.rules

and then restart or reload MailScanner.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list