Need clarification on whitelist rules

Steve Swaney Steve.Swaney at FSL.COM
Wed Oct 6 20:17:41 IST 2004


I don't believe it can be done using Postfix. Please correct me if I'm
wrong.

I know it works in sendmail - we use it on many systems;

I believe it can be done in exim. Mike Bacher [mikeb at tulsaconnect.com] sent
me the directions below:
-----------------------------------

FYI, a potential solution to the white/blacklist problem with MailScanner
when using exim as the MTA:

[I wont have time to test this myself for a week or two]

-------- Original Message --------
Return-Path: <ph10 at cus.cam.ac.uk>
Date: Fri, 16 Jul 2004 11:09:59 +0100 (BST)
From: Philip Hazel <ph10 at cus.cam.ac.uk>
Reply-To: exim-users at exim.org
To: Mike Bacher <isp-list at tulsaconnect.com>

On Fri, 16 Jul 2004, Mike Bacher wrote:

> Well, I only care that a message with multiple recipients gets broken
> up into 1 message per recipient and placed into the queue for outbound
> delivery,

You can do this with an "incestuous" call to exim. Make this your first
router:

split:
   driver = accept
   domains = the.domains.you.want.to.do.this.for
   condition = ${if eq {$received_protocol}{split}{no}{yes}}
   transport = send_to_self
   no_verify

Add this transport:

send_to_self:
   driver = pipe
   batch_max = 1
   use_bsmtp
   command = /usr/sbin/exim -oMr split -bS
   user = exim

Untested. YMMV. You logs will get bigger, of course...

--
Philip Hazel            University of Cambridge Computing Service,
ph10 at cus.cam.ac.uk      Cambridge, England. Phone: +44 1223 334714.
Get the Exim 4 book:    http://www.uit.co.uk/exim-book
-------------------------------------------------------------

Steve

Steve Swaney
President
Fortress Systems Ltd.
www.fsl.com
steve.swaney at fsl.com

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Dan Spray
> Sent: Wednesday, October 06, 2004 2:51 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Need clarification on whitelist rules
>
> Thank you for the link.  This is exactly what is happening.  However, I am
> using postfix not sendmail.  Anyone out there that has done the same thing
> in postfix?
>
> Dan
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> Of Dan
> Sent: Wednesday, October 06, 2004 10:27 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Need clarification on whitelist rules
>
> I had this problem as well.
> I assume you are using Sendmail.
>
> Following this guide in the FAQ solved the problem for me.
>
> http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/169.html
>
> regards,
> -dan
>
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> Of Dan Spray
> Sent: October 6, 2004 9:53 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Need clarification on whitelist rules
>
> That is the problem though.  I have a customer who has asked to be
> whitelisted so I add them to the spam.whitelist.rules file.  Then a spam
> message comes in and is addressed to 10 people, ONE of which is the
> customer
> that wanted to be whitelisted.  The message however is declared
> whitelisted
> and is delivered to all 10 people even though it is actually scored as
> spam.
>
> Dan
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> Of Julian Field
> Sent: Wednesday, October 06, 2004 9:32 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Need clarification on whitelist rules
>
> Only if you are deleting it and not delivering it to the people who didn't
> whitelist it.
> For each recipient, you can either
> 1) whitelist and deliver it
> 2) delete it
> Then it's easy, and I've done it before.
>
> At 14:34 06/10/2004, you wrote:
> >Okay, so now that I am back in the office, is there anyway to avoid
> >having all of the recipients whitelisted when just one of the
> >recipients has requested to be whitelisted?
> >
> >Dan
> >
> >-----Original Message-----
> >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf
> >Of Julian Field
> >Sent: Friday, October 01, 2004 10:04 AM
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Re: Need clarification on whitelist rules
> >
> >At 15:26 01/10/2004, you wrote:
> > > > -----Original Message-----
> > > > From: MailScanner mailing list
> > > > [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > > > Behalf Of Julian Field
> > > > Sent: Friday, October 01, 2004 9:10 AM
> > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > Subject: Re: Need clarification on whitelist rules
> > > >
> > > >
> > > > At 14:56 01/10/2004, you wrote:
> > > > > > -----Original Message-----
> > > > > > From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > > > > > Behalf Of Julian Field
> > > > > > Sent: Friday, October 01, 2004 7:57 AM
> > > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > > Subject: Re: Need clarification on whitelist rules
> > > > > >
> > > > > >
> > > > ><snip>
> > > > > >
> > > > > > What you need is a Custom Function that edits the recipients
> > > > list in each
> > > > > > message, according to whether they want to be filtered or
> > > > not. I've done
> > > > > > something like this already, just haven't yet published it.
> > > > > >
> > > > > > What form would people like it in? Added to the per-user
> > > > white and black
> > > > > > list code?
> > > > > > It would have to be a simple "remove them from the message if
> > > > > > it's in their blacklist or not in their whitelist".
> > > > > >
> > > > > > Can people see any problems with this? Something is nagging
> > > > me that this
> > > > > > isn't the correct functionality, but I can't see what the
> > > > right answer is
> > > > > > for definite.
> > > > > > --
> > > > >
> > > > >I guess my first question is how it's tagged as spam when there
> > > > >is a
> >rule
> > > > >file for the spam scoring settings? If user A tagges as spam
> > > > with a score of
> > > > >5.0 and user B tagges it with a score of 7.5 how does the message
> > > > >get tagged, since a score of 6.5 would flag as spam for user A
> > > > >and
> > > > ham for user
> > > > >B?
> > > >
> > > > We use it only for automatic spam deletion. In your example, user
> > > > A
> >would
> > > > be removed from the list of recipients, and it would be normally
> >delivered
> > > > to user B. To use it for anything other than spam deletion is
> > > > pretty
> >much
> > > > impossible.
> > > >
> > > > --
> > >
> > >Isn't this what you are proposing above?
> > >
> > > > > > It would have to be a simple "remove them from the message if
> > > > > > it's in their blacklist or not in their whitelist".
> > >
> > >so if you handle the white/black listing here if it's spam and
> whitelisted
> > >don't remove them and if it's ham but blacklisted do remove them, or
> > >am I missing something?
> >
> >
> > >  I would think where every the per user scoring is checked if the
> > >whitelist/blacklist was checked as well it would simply adjust the
> > >actual tagging as spam or ham the same as the scoring based tagging
> would,
> > >the difference being if it scores as 6.5 and the user threshold is
> > >7.5
> but
> > >it's blacklisted it would be tagged as spam and not ham?
> >
> >I don't understand that sentence at all, sorry.
> >
> > >  I'm sorry if I am
> > >coming across dense just looking for a way to simplify the overall
> > >code changes
> >
> >--
> >Julian Field
> >www.MailScanner.info
> >MailScanner thanks transtec Computers for their support Buy the
> >MailScanner book at www.MailScanner.info/store
> >
> >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >------------------------ MailScanner list ------------------------ To
> >unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
> >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >------------------------ MailScanner list ------------------------ To
> >unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
> >archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support Buy the
> MailScanner
> book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
> archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
> archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> Fortress Systems Ltd.
> www.fsl.com
>



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Fortress Systems Ltd.
www.fsl.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).



More information about the MailScanner mailing list