Mail unscanned when sent to multiple users

[Martin Hepworth]

Mark

MS only checks the initial 'to' user, there's no way for it to resolve
multiple 'to','cc','bcc' recipients and somehow figure out what it
should do (ie for one user the result might need to be 'yes' and for
another it might be 'no', so what should it do?).

A way around this (if you're using sendmail or Exim) is to split the
message into individual messages for the individual recipients then the
rules are nice and simple. There's an exmaple of to setup sendmail and
exim to do this in the  Quarantine  report MS addition at
http://www.fsl.com/support/QuarantineReport.tar.gz

 From what I understand you can't do this with Postfix, but if anyone's
figured it out please let the list know so Steve Swaney can update the
Quarantine Report instructions..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Mark Waterhouse - Mailing Lists wrote:
> I have MailScanner setup to scan multiple domains on one box and then feed
> the resulting email to their destination server.
> I also have MailScanner to selectively scan messages sent to domain users.
>
> I have spam/virus checking based upon a ruleset....domain.filter.rules
>
> I have set my rules up as
>
> FromOrTo:    *@mydomain1.com    no
> FromOrTo:    *@mydomain2.com    yes
> FromOrTo:    user at mydomain3.com    no
> FromOrTo:    default    yes
>
> If a mail is sent to user at mydomain3.com, it isnt scanned.....desired
> behaviour
> If a mail is sent to user2 at mydomain3.com, it is scanned....also desired
> behaviour (because of the default line)
>
> However, if a message is sent to user at mydomain3.com AND
> user2 at mydomain3.com,
> neither message is scanned.
>
> If I alter the rule to include a YES statement for user2 at mydomain3.com, it
> works as desired.
>
> I know the default rule is working as messages sent only to
> user2 at domain3.com are scanned.
>
>
> Can anyone offer a reason for this and has anyone else seen this behaviour.
>
> Thanks
> Mark Waterhouse
> DFK Systems Limited
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!