request of list members

[James Gray]

On Thu, 24 Jun 2004 12:57 pm, Chris wrote:
> On Wednesday 23 June 2004 05:52 pm, James Gray wrote:
> > On Thu, 24 Jun 2004 07:19 am, Chris wrote:
> > > On Wednesday 23 June 2004 04:03 pm, James Gray wrote:
> > > > As for a rule, just make the following changes to MailScanner.conf:
> > > >
> > > > - Change "Scanned Modify Subject = yes" to be a rule set, ie,
> > > > (change "yes" to "%etc-dir%/rules/subject.scanned.rules")
> > > >
> > > > - Create the "subject.scanned.rules" file in your rules directory
> > > > with: ToOrFrom:    mailscanner at jiscmail.ac.uk    no
> > > > ToOrFrom:    default                       yes
> > > >
> > > > - Restart MailScanner and voila.
> > > >
> > > > You could even wild card the "jiscmail.ac.uk" domain
> > > > (*@*jiscmail.ac.uk) if you wanted to - that's what I've done :)
> > >
> > > You sure it's this below?
> > > Scanned Modify Subject = %etc-dir%/rules/subject.scanned.rules # end
> > > Errors on mine.
> > >
> > > --
> > > Best regards,
> > > Chris
> >
> > Without knowing the error I can only make some general suggestions:
> > 1. Is "%etc-dir%" defined at the top of MailScanner.conf?
> >
> > 2. Did you create the "subject.scanned.rules" file in the correct
> > place? (Check where %etc-dir% is pointing)
> >
> > 3. Is the "subject.scanned.rules" file readable by the MailScanner
> > process? Sometimes this isn't root (my boxes use the "mail" user).  If
> > in doubt, just "chmod 0644 subject.scanned.rules" will make it world
> > readable.
> >
> > 4. What error are you getting?

> Actually, its a syntax error in line 2 of the said file, but here is what
> you asked...

** Snip **

> Errors:
> Jun 23 19:01:37 makeworld MailScanner[85741]: MailScanner E-Mail Virus
> Scanner version 4.31.6 starting...
> Jun 23 19:01:37 makeworld MailScanner[85741]: Syntax error in line 2 of
> ruleset file /usr/local/etc/MailScanner/rules/subject.scanned.rules
> Jun 23 19:01:37 makeworld MailScanner[85741]: Aborting due to syntax
> errors in /usr/local/etc/MailScanner/rules/subject.scanned.rules.
>
> Here is subject.scanned.rules
> FromOrTo:    mailscanner at jiscmail.ac.uk         no
> FromOrTo:    default                            yes
>
> It seems it does not like "yes" in line 2.

OK - really dumb question, but are you separating the fields in the rule
file with tabs?  You can't use spaces in ".rules" files.  I always put a
blank line on the end of files (old habit...probably should get out of it)
which doesn't seem to break anything.

James
--
Grelb's Reminder:
        Eighty percent of all people consider themselves to be above
average drivers.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html