Emailing quarantined emails
Jody Cleveland
Cleveland at WINNEFOX.ORG
Tue Mar 9 15:49:46 GMT 2004
Ok, I was finally able to do this. I created/ modified all the files
listed. When I started MailScanner afterward, I stopped receiving
incoming email.
When I comment out these two lines in MailScanner.conf:
Filename Rules = %etc-dir%/filename.rules
Filetype Rules = %etc-dir%/filetype.rules
I started receiving mail again, but of course can not release files from
quarantine. Does it matter where in MailScanner.conf those two lines go?
Jody
> -----Original Message-----
> From: Stephe Campbell [mailto:campbell at CNPAPERS.COM]
> Sent: Monday, February 23, 2004 11:15 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Emailing quarantined emails
>
> Mr. Freegard replied to me with the following setup for
> fixing what you
> describe. It fixes all but when there are forms in the
> quarantined mail. I
> haven't set up rules for this yet. You should note that
> released files are
> sent from localhost allowing this to work.
>
> ********************************************
> To release blocked attachments you should use two rulesets to
> allow bypass
> of filetype and filename checking - on my systems I do it like this:
>
> MailScanner.conf:
> Filename Rules = %etc-dir%/filename.rules
> Filetype Rules = %etc-dir%/filetype.rules
>
> filename.rules:
> From: 127.0.0.1 /etc/MailScanner/filename.rules.allowall.conf
> FromOrTo: default /etc/MailScanner/filename.rules.conf
>
> filename.rules.allowall.conf:
> allow .* - -
>
> filename.rules.conf:
> As MailScanner supplied default
>
> filetype.rules:
> From: 127.0.0.1 /etc/MailScanner/filetype.rules.allowall.conf
> FromOrTo: default /etc/MailScanner/filetype.rules.conf
>
> filetype.rules.allowall.conf:
> allow .* - -
>
> filetype.rules.conf:
> As MailScanner supplied default
>
>
> Doing it this way means that everything get's virus checked
> and you have a
> log of the transaction in the MailWatch database should
> someone release
> something they shouldn't - which is why I would recommend
> doing it this way
> as you can't be too paranoid.
>
> ****************************************
>
> This works very well for me. Thanks again Mr. Freegard
>
> Steve Campbell
> campbell at cnpapers.com
> Charleston Newspapers
>
>
> ----- Original Message -----
> From: "Kai Schaetzl" <maillists at CONACTIVE.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Monday, February 23, 2004 9:31 AM
> Subject: Re: Emailing quarantined emails
>
>
> > Gregg Berkholtz wrote on Sat, 21 Feb 2004 13:11:10 -0800:
> >
> > > I'm trying to avoid changing the
> > > procedure our helpdesk has become accustomed to.
> > >
> >
> > You could start using Mailwatch and tell your Helpdesk to
> release messages
> > via it's web interface.
> >
> >
> > Kai
> >
> > --
> >
> > Kai Schätzl, Berlin, Germany
> > Get your web at Conactive Internet Services:
> http://www.conactive.com
> > IE-Center: http://ie5.de & http://msie.winware.org
>
More information about the MailScanner
mailing list