Notify Senders Ruleset

[Kevin Spicer]

On Fri, 2005-08-05 at 15:38 -0500, Bill Glick wrote:
> >>> # Match user at ncsa.uiuc.edu as well as user at sub.ncsa.uiuc.edu
> >>> From:           /[\@\.]ncsa\.uiuc\.edu$/        yes
> >>> From:           *@*.ncsa.uiuc.edu       yes
> >>> FromOrTo:       default                 no

I can't see why this doesn't work, but one observation...

This matches the envelope sender so are you sure that the envelope
sender on the messages being notified is not set to one of your domains
( a fairly common trick by spammers and viruses).

If possible its best to base rules for this on your internal IP ranges
rather than on address, so that your users don't get notified on
incoming viruses which are spoofing their address as sender.  I notify
senders for all rfc1918 private address ranges as I can be sure that
covers all bases within our network (things are changing regularly!) but
we'll never receive an incoming (external) message from those IP ranges.

=================================================================

BMRB 
http://www.bmrb.co.uk
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB Limited accepts no liability 
in relation to any personal emails, or content of any email which 
does not directly relate to our business.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!