Emailing quarantined emails

[Stephe Campbell]

Mr. Freegard replied to me with the following setup for fixing what you
describe. It fixes all but when there are forms in the quarantined mail. I
haven't set up rules for this yet. You should note that released files are
sent from localhost allowing this to work.

********************************************
To release blocked attachments you should use two rulesets to allow bypass
of filetype and filename checking - on my systems I do it like this:

MailScanner.conf:
Filename Rules = %etc-dir%/filename.rules
Filetype Rules = %etc-dir%/filetype.rules

filename.rules:
From: 127.0.0.1 /etc/MailScanner/filename.rules.allowall.conf
FromOrTo: default /etc/MailScanner/filename.rules.conf

filename.rules.allowall.conf:
allow   .*      -       -

filename.rules.conf:
As MailScanner supplied default

filetype.rules:
From: 127.0.0.1 /etc/MailScanner/filetype.rules.allowall.conf
FromOrTo: default /etc/MailScanner/filetype.rules.conf

filetype.rules.allowall.conf:
allow   .*      -       -

filetype.rules.conf:
As MailScanner supplied default


Doing it this way means that everything get's virus checked and you have a
log of the transaction in the MailWatch database should someone release
something they shouldn't - which is why I would recommend doing it this way
as you can't be too paranoid.

****************************************

This works very well for me. Thanks again Mr. Freegard

Steve Campbell
campbell at cnpapers.com
Charleston Newspapers


----- Original Message ----- 
From: "Kai Schaetzl" <maillists at CONACTIVE.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Monday, February 23, 2004 9:31 AM
Subject: Re: Emailing quarantined emails


> Gregg Berkholtz wrote on         Sat, 21 Feb 2004 13:11:10 -0800:
>
> > I'm trying to avoid changing the
> > procedure our helpdesk has become accustomed to.
> >
>
> You could start using Mailwatch and tell your Helpdesk to release messages
> via it's web interface.
>
>
> Kai
>
> --
>
> Kai Schätzl, Berlin, Germany
> Get your web at Conactive Internet Services: http://www.conactive.com
> IE-Center: http://ie5.de & http://msie.winware.org