filename scanning by domain
Julian Field
MailScanner at ecs.soton.ac.uk
Fri Feb 18 13:54:36 GMT 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
It should apply them in the order they appear in the ruleset. It will
concatenate the filename.rules.conf files from all the matching rules
and use that to allow/deny the filename.
Chris Trudeau wrote:
> I found this in the archives:
>
>
>
> At 18:41 16/12/2002, you wrote:
>
> >Any way to turn off filename scanning for a particular domain? I have tried
>
> >using the whitelist, but that has no effect on filename scanning.
>
>
>
> Create a filename rules file that just contains
>
> allow $ - -
>
> and create a ruleset that points to this file just for this domain, and
>
> uses a default filename.rules.conf file for everyone else.
>
>
>
> >A particular customer get's .bat files from an automated system, but I want
>
> >to reject it for everyone else. Thanks.
>
>
>
> In which case, you don't want the filename rules file above, you want a
>
> copy of the normal one but with 1 extra filename rule at the top
>
> allow \.bat$ - -
>
>
>
>
>
> My question is in what order does MailScanner read these? I have a
> domain I want to allow .zip files from. My rules file is built as
> outlined above, and I have the following:
>
>
>
> From: Friendlydomain.com /configfiles/allow.filename.rule
>
>
>
> To: mydomain.com /configfiles/blockbadstuff.rule
>
> From: mydomain.com /configfiles/allowfrommydomain.rule
>
>
>
>
>
> Where allow.filename.rule is a blanket allow file. Blockbadstuff is
> my default inbound rules file and allowfrommydomain.rule is my
> outbound rules file.
>
>
>
> The problem (I think) is that MailScanner is seeing the message match
> the From: friendlydomain.com AND the To: mydomain.com condition and is
> applying the blocking rule. Is this right or does mailscanner
> read/apply rules in order?
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list