Mail unscanned when sent to multiple users

Fri Feb 4 14:35:29 GMT 2005

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I'm actually running MS 4.37.7-1. I upgraded it on 01/27 and the problem is
still there. I know there have been some releases since then but these, as
Martin has stated, dont mention this change in the changelog.

Mark

----- Original Message -----
From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Friday, February 04, 2005 12:05 PM
Subject: Re: Mail unscanned when sent to multiple users

> Mark
>
> See marcels email on this - can't see I saw anything in the change logs
> about this though....
>
> Best for the MTA to do it currenly, unless Julian has any bright ideas
> when he gets back from holidays in a couple of weeks...
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Mark Waterhouse - Mailing Lists wrote:
>> Wow...surely the recipient lines could get split using some perl code and
>> then the tests performed on that...
>>
>> ----- Original Message -----
>> From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
>> To: <MAILSCANNER at JISCMAIL.AC.UK>
>> Sent: Friday, February 04, 2005 11:43 AM
>> Subject: Re: Mail unscanned when sent to multiple users
>>
>>
>>> Mark
>>>
>>> MS only checks the initial 'to' user, there's no way for it to resolve
>>> multiple 'to','cc','bcc' recipients and somehow figure out what it
>>> should do (ie for one user the result might need to be 'yes' and for
>>> another it might be 'no', so what should it do?).
>>>
>>> A way around this (if you're using sendmail or Exim) is to split the
>>> message into individual messages for the individual recipients then the
>>> rules are nice and simple. There's an exmaple of to setup sendmail and
>>> exim to do this in the  Quarantine  report MS addition at
>>> http://www.fsl.com/support/QuarantineReport.tar.gz
>>>
>>> From what I understand you can't do this with Postfix, but if anyone's
>>> figured it out please let the list know so Steve Swaney can update the
>>> Quarantine Report instructions..
>>>
>>> --
>>> Martin Hepworth
>>> Snr Systems Administrator
>>> Solid State Logic
>>> Tel: +44 (0)1865 842300
>>>
>>>
>>> Mark Waterhouse - Mailing Lists wrote:
>>>
>>>> I have MailScanner setup to scan multiple domains on one box and then
>>>> feed
>>>> the resulting email to their destination server.
>>>> I also have MailScanner to selectively scan messages sent to domain
>>>> users.
>>>>
>>>> I have spam/virus checking based upon a ruleset....domain.filter.rules
>>>>
>>>> I have set my rules up as
>>>>
>>>> FromOrTo:    *@mydomain1.com    no
>>>> FromOrTo:    *@mydomain2.com    yes
>>>> FromOrTo:    user at mydomain3.com    no
>>>> FromOrTo:    default    yes
>>>>
>>>> If a mail is sent to user at mydomain3.com, it isnt scanned.....desired
>>>> behaviour
>>>> If a mail is sent to user2 at mydomain3.com, it is scanned....also desired
>>>> behaviour (because of the default line)
>>>>
>>>> However, if a message is sent to user at mydomain3.com AND
>>>> user2 at mydomain3.com,
>>>> neither message is scanned.
>>>>
>>>> If I alter the rule to include a YES statement for user2 at mydomain3.com,
>>>> it
>>>> works as desired.
>>>>
>>>> I know the default rule is working as messages sent only to
>>>> user2 at domain3.com are scanned.
>>>>
>>>>
>>>> Can anyone offer a reason for this and has anyone else seen this
>>>> behaviour.
>>>>
>>>> Thanks
>>>> Mark Waterhouse
>>>> DFK Systems Limited
>>>>
>>>> ------------------------ MailScanner list ------------------------
>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>> 'leave mailscanner' in the body of the email.
>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>> **********************************************************************
>>>
>>> This email and any files transmitted with it are confidential and
>>> intended solely for the use of the individual or entity to whom they
>>> are addressed. If you have received this email in error please notify
>>> the system manager.
>>>
>>> This footnote confirms that this email message has been swept
>>> for the presence of computer viruses and is believed to be clean.
>>>
>>> **********************************************************************
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!