Mail unscanned when sent to multiple users

Stephen Swaney steve.swaney at FSL.COM
Fri Feb 4 14:59:36 GMT 2005 

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Mark Waterhouse - Mailing Lists
> Sent: Friday, February 04, 2005 9:35 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Mail unscanned when sent to multiple users
>
> I'm actually running MS 4.37.7-1. I upgraded it on 01/27 and the problem
> is
> still there. I know there have been some releases since then but these, as
> Martin has stated, dont mention this change in the changelog.
>
> Mark
>
> ----- Original Message -----
> From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Friday, February 04, 2005 12:05 PM
> Subject: Re: Mail unscanned when sent to multiple users
>
>
> > Mark
> >
> > See marcels email on this - can't see I saw anything in the change logs
> > about this though....
> >
> > Best for the MTA to do it currenly, unless Julian has any bright ideas
> > when he gets back from holidays in a couple of weeks...
> >
> > --
> > Martin Hepworth
> > Snr Systems Administrator
> > Solid State Logic
> > Tel: +44 (0)1865 842300
> >
> >

The code that Julian added a while back was to support the:

        Use Default Rules With Multiple Recipients = no

Configuration Value. I quote below from MailScanner.conf:

"------------
# When trying to work out the value of configuration parameters which are
# using a ruleset, this controls the behaviour when a rule is checking the
# "To:" addresses.
# If this option is set to "yes", then the following happens when checking
# the ruleset:
#   a) 1 recipient. Same behaviour as normal.
#   b) Several recipients, but all in the same domain (domain.com for
example).
#      The rules are checked for one that matches the string "*@domain.com".
#   c) Several recipients, not all in the same domain.
#      The rules are checked for one that matches the string "*@*".
#
# If this option is set to "no", then some rules will use the result they
# get from the first matching rule for any of the recipients of a message,
# so the exact value cannot be predicted for messages with more than 1
# recipient.
#
# This value *cannot* be the filename of a ruleset.

Use Default Rules With Multiple Recipients = no
------------"

Since:

1. I'm pretty sure that Julian regards the splitting of email to multiple
recipients into individual messages should be the task of the MTA.

2. From previous threads on this topic I'm pretty sure that Postfix can
perform this task and I know that Sendmail and Exim can do this. I wouldn't
expect that this will become a MailScanner feature.

Be aware that splitting email to multiple recipients into individual
messages can add substantially to your gateway load. I've seen reports of
+30% load imposed by adding this feature.

Steve

Steve Swaney
President
Fortress Systems Ltd.
Phone: 202 338-1670
Cell: 202 352-3262
www.fsl.com
steve.swaney at fsl.com

> > Mark Waterhouse - Mailing Lists wrote:
> >> Wow...surely the recipient lines could get split using some perl code
> and
> >> then the tests performed on that...
> >>
> >> ----- Original Message -----
> >> From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
> >> To: <MAILSCANNER at JISCMAIL.AC.UK>
> >> Sent: Friday, February 04, 2005 11:43 AM
> >> Subject: Re: Mail unscanned when sent to multiple users
> >>
> >>
> >>> Mark
> >>>
> >>> MS only checks the initial 'to' user, there's no way for it to resolve
> >>> multiple 'to','cc','bcc' recipients and somehow figure out what it
> >>> should do (ie for one user the result might need to be 'yes' and for
> >>> another it might be 'no', so what should it do?).
> >>>
> >>> A way around this (if you're using sendmail or Exim) is to split the
> >>> message into individual messages for the individual recipients then
> the
> >>> rules are nice and simple. There's an exmaple of to setup sendmail and
> >>> exim to do this in the  Quarantine  report MS addition at
> >>> http://www.fsl.com/support/QuarantineReport.tar.gz
> >>>
> >>> From what I understand you can't do this with Postfix, but if anyone's
> >>> figured it out please let the list know so Steve Swaney can update the
> >>> Quarantine Report instructions..
> >>>
> >>> --
> >>> Martin Hepworth
> >>> Snr Systems Administrator
> >>> Solid State Logic
> >>> Tel: +44 (0)1865 842300
> >>>
> >>>
> >>> Mark Waterhouse - Mailing Lists wrote:
> >>>
> >>>> I have MailScanner setup to scan multiple domains on one box and then
> >>>> feed
> >>>> the resulting email to their destination server.
> >>>> I also have MailScanner to selectively scan messages sent to domain
> >>>> users.
> >>>>
> >>>> I have spam/virus checking based upon a
> ruleset....domain.filter.rules
> >>>>
> >>>> I have set my rules up as
> >>>>
> >>>> FromOrTo:    *@mydomain1.com    no
> >>>> FromOrTo:    *@mydomain2.com    yes
> >>>> FromOrTo:    user at mydomain3.com    no
> >>>> FromOrTo:    default    yes
> >>>>
> >>>> If a mail is sent to user at mydomain3.com, it isnt scanned.....desired
> >>>> behaviour
> >>>> If a mail is sent to user2 at mydomain3.com, it is scanned....also
> desired
> >>>> behaviour (because of the default line)
> >>>>
> >>>> However, if a message is sent to user at mydomain3.com AND
> >>>> user2 at mydomain3.com,
> >>>> neither message is scanned.
> >>>>
> >>>> If I alter the rule to include a YES statement for
> user2 at mydomain3.com,
> >>>> it
> >>>> works as desired.
> >>>>
> >>>> I know the default rule is working as messages sent only to
> >>>> user2 at domain3.com are scanned.
> >>>>
> >>>>
> >>>> Can anyone offer a reason for this and has anyone else seen this
> >>>> behaviour.
> >>>>
> >>>> Thanks
> >>>> Mark Waterhouse
> >>>> DFK Systems Limited
> >>>>
> >>>> ------------------------ MailScanner list ------------------------
> >>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>>> 'leave mailscanner' in the body of the email.
> >>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>>
> >>>> Support MailScanner development - buy the book off the website!
> >>>
> >>>
> >>> **********************************************************************
> >>>
> >>> This email and any files transmitted with it are confidential and
> >>> intended solely for the use of the individual or entity to whom they
> >>> are addressed. If you have received this email in error please notify
> >>> the system manager.
> >>>
> >>> This footnote confirms that this email message has been swept
> >>> for the presence of computer viruses and is believed to be clean.
> >>>
> >>> **********************************************************************
> >>>
> >>> ------------------------ MailScanner list ------------------------
> >>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >>> 'leave mailscanner' in the body of the email.
> >>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>>
> >>
> >> ------------------------ MailScanner list ------------------------
> >> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >> 'leave mailscanner' in the body of the email.
> >> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >> Support MailScanner development - buy the book off the website!
> >
> > **********************************************************************
> >
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the system manager.
> >
> > This footnote confirms that this email message has been swept
> > for the presence of computer viruses and is believed to be clean.
> >
> > **********************************************************************
> >
> > ------------------------ MailScanner list ------------------------
> > To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > 'leave mailscanner' in the body of the email.
> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> > Support MailScanner development - buy the book off the website!
> >
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list