Emailing quarantined emails

[Stephe Campbell]

These lines, I would think, should not matter where they reside in
MailScanner.conf, but they should be there already. I would also check to
make sure you have the %etc-dir% variable set somewhere in the same file. I
wouldn't think that even an error in these two lines would stop incoming
mail. You are basically using what is already in the vanilla
MailScanner.conf for these two lines, except you are pointing them to an
extra layer of rules for the localhost.

Check your logs for any errors and then run in debug mode to see what this
says.

Steve Campbell
campbell at cnpapers.com
Charleston Newspapers

----- Original Message ----- 
From: "Jody Cleveland" <Cleveland at WINNEFOX.ORG>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, March 09, 2004 10:49 AM
Subject: Re: Emailing quarantined emails


Ok, I was finally able to do this. I created/ modified all the files
listed. When I started MailScanner afterward, I stopped receiving
incoming email.

When I comment out these two lines in MailScanner.conf:
Filename Rules = %etc-dir%/filename.rules
Filetype Rules = %etc-dir%/filetype.rules

I started receiving mail again, but of course can not release files from
quarantine. Does it matter where in MailScanner.conf those two lines go?

Jody

> -----Original Message-----
> From: Stephe Campbell [mailto:campbell at CNPAPERS.COM]
> Sent: Monday, February 23, 2004 11:15 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Emailing quarantined emails
>
> Mr. Freegard replied to me with the following setup for
> fixing what you
> describe. It fixes all but when there are forms in the
> quarantined mail. I
> haven't set up rules for this yet. You should note that
> released files are
> sent from localhost allowing this to work.
>
> ********************************************
> To release blocked attachments you should use two rulesets to
> allow bypass
> of filetype and filename checking - on my systems I do it like this:
>
> MailScanner.conf:
> Filename Rules = %etc-dir%/filename.rules
> Filetype Rules = %etc-dir%/filetype.rules
>
> filename.rules:
> From: 127.0.0.1 /etc/MailScanner/filename.rules.allowall.conf
> FromOrTo: default /etc/MailScanner/filename.rules.conf
>
> filename.rules.allowall.conf:
> allow   .*      -       -
>
> filename.rules.conf:
> As MailScanner supplied default
>
> filetype.rules:
> From: 127.0.0.1 /etc/MailScanner/filetype.rules.allowall.conf
> FromOrTo: default /etc/MailScanner/filetype.rules.conf
>
> filetype.rules.allowall.conf:
> allow   .*      -       -
>
> filetype.rules.conf:
> As MailScanner supplied default
>
>
> Doing it this way means that everything get's virus checked
> and you have a
> log of the transaction in the MailWatch database should
> someone release
> something they shouldn't - which is why I would recommend
> doing it this way
> as you can't be too paranoid.
>
> ****************************************
>
> This works very well for me. Thanks again Mr. Freegard
>
> Steve Campbell
> campbell at cnpapers.com
> Charleston Newspapers
>
>
> ----- Original Message ----- 
> From: "Kai Schaetzl" <maillists at CONACTIVE.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Monday, February 23, 2004 9:31 AM
> Subject: Re: Emailing quarantined emails
>
>
> > Gregg Berkholtz wrote on         Sat, 21 Feb 2004 13:11:10 -0800:
> >
> > > I'm trying to avoid changing the
> > > procedure our helpdesk has become accustomed to.
> > >
> >
> > You could start using Mailwatch and tell your Helpdesk to
> release messages
> > via it's web interface.
> >
> >
> > Kai
> >
> > --
> >
> > Kai Schätzl, Berlin, Germany
> > Get your web at Conactive Internet Services:
> http://www.conactive.com
> > IE-Center: http://ie5.de & http://msie.winware.org
>