filename scanning by domain

Julian Field MailScanner at ecs.soton.ac.uk
Fri Feb 18 13:54:36 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

It should apply them in the order they appear in the ruleset. It will
concatenate the filename.rules.conf files from all the matching rules
and use that to allow/deny the filename.

Chris Trudeau wrote:

> I found this in the archives:
>
>
>
>        At 18:41 16/12/2002, you wrote:
>
>        >Any way to turn off filename scanning for a particular domain?  I have tried
>
>        >using the whitelist, but that has no effect on filename scanning.
>
>
>
>        Create a filename rules file that just contains
>
>        allow   $       -       -
>
>        and create a ruleset that points to this file just for this domain, and
>
>        uses a default filename.rules.conf file for everyone else.
>
>
>
>        >A particular customer get's .bat files from an automated system, but I want
>
>        >to reject it for everyone else.  Thanks.
>
>
>
>        In which case, you don't want the filename rules file above, you want a
>
>        copy of the normal one but with 1 extra filename rule at the top
>
>        allow   \.bat$  -       -
>
>
>
>
>
> My question is in what order does MailScanner read these?  I have a
> domain I want to allow .zip files from.  My rules file is built as
> outlined above, and I have the following:
>
>
>
> From:    Friendlydomain.com       /configfiles/allow.filename.rule
>
>
>
> To:        mydomain.com              /configfiles/blockbadstuff.rule
>
> From:    mydomain.com              /configfiles/allowfrommydomain.rule
>
>
>
>
>
> Where allow.filename.rule is a blanket allow file.  Blockbadstuff is
> my default inbound rules file and allowfrommydomain.rule is my
> outbound rules file.
>
>
>
> The problem (I think) is that MailScanner is seeing the message match
> the From: friendlydomain.com AND the To: mydomain.com condition and is
> applying the blocking rule.  Is this right or does mailscanner
> read/apply rules in order?
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list