Mail unscanned when sent to multiple users

[Mark Waterhouse - Mailing Lists]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Wow...surely the recipient lines could get split using some perl code and
then the tests performed on that...

----- Original Message -----
From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Friday, February 04, 2005 11:43 AM
Subject: Re: Mail unscanned when sent to multiple users


> Mark
>
> MS only checks the initial 'to' user, there's no way for it to resolve
> multiple 'to','cc','bcc' recipients and somehow figure out what it
> should do (ie for one user the result might need to be 'yes' and for
> another it might be 'no', so what should it do?).
>
> A way around this (if you're using sendmail or Exim) is to split the
> message into individual messages for the individual recipients then the
> rules are nice and simple. There's an exmaple of to setup sendmail and
> exim to do this in the  Quarantine  report MS addition at
> http://www.fsl.com/support/QuarantineReport.tar.gz
>
> From what I understand you can't do this with Postfix, but if anyone's
> figured it out please let the list know so Steve Swaney can update the
> Quarantine Report instructions..
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Mark Waterhouse - Mailing Lists wrote:
>> I have MailScanner setup to scan multiple domains on one box and then
>> feed
>> the resulting email to their destination server.
>> I also have MailScanner to selectively scan messages sent to domain
>> users.
>>
>> I have spam/virus checking based upon a ruleset....domain.filter.rules
>>
>> I have set my rules up as
>>
>> FromOrTo:    *@mydomain1.com    no
>> FromOrTo:    *@mydomain2.com    yes
>> FromOrTo:    user at mydomain3.com    no
>> FromOrTo:    default    yes
>>
>> If a mail is sent to user at mydomain3.com, it isnt scanned.....desired
>> behaviour
>> If a mail is sent to user2 at mydomain3.com, it is scanned....also desired
>> behaviour (because of the default line)
>>
>> However, if a message is sent to user at mydomain3.com AND
>> user2 at mydomain3.com,
>> neither message is scanned.
>>
>> If I alter the rule to include a YES statement for user2 at mydomain3.com,
>> it
>> works as desired.
>>
>> I know the default rule is working as messages sent only to
>> user2 at domain3.com are scanned.
>>
>>
>> Can anyone offer a reason for this and has anyone else seen this
>> behaviour.
>>
>> Thanks
>> Mark Waterhouse
>> DFK Systems Limited
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!