questions mailing quarantined files

[Glenn Steen]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On 29/07/05, Sean Embry <sean at nisd.net> wrote:
>  
> Hi, 
>   
> This is my set up: 
>   
> Mail enters and leaves via the Mail Scanner box. The Mail Scanner is the MX
> for my domain, and my internal systems use the MailScanner box as their
> smart host. The internal boxes are protected by an ACL that only allowes the
> MailScanner box to connect to them, restricted by an ACL. 
>   
> The problem: 
>   
> Someone receives a file on the MailScanner. The file gets quarantined for
> whatever reason. 
> I want to be able to email that file in regardless of the quarantine, but I
> only want someone with root privs to be able to do that. 
> EG: someone uses 
> formail -s procmail -d [username]@my.internal.box.net < message 
>   
> (I'm doing that with an eye to setting up a web page where the user can
> retreive the file.) 
>   
> We used to be able to do this on the 4.12-2 box, but on our new 4.43.8-1 box
> this no longer works. 
> It gets bounced just as if it were sent from the internet, whereas the old
> box was quite happy to allow it. 
>   
> Also, I've noticed on the old box, the headers for the internal forwards
> look thus: 
>   
> Return-path: <abuse at orb.nisd.net>
> Received: from orb.nisd.net
>  (orb.northside.isd.tenet.edu [165.111.2.14])
>  by thor.nisd.net; Wed, 06 Jul 2005 13:42:07 -0500
> Received: (from abuse at localhost)
>  by orb.nisd.net (8.11.6/8.11.6) id j66IdMI10273
>  for abuse at thor.northside.isd.tenet.edu; Wed, 6 Jul 2005
> 13:39:22 -0500
> Received: from xxx.xxx.edu (xxx.xxxx.edu [xxx.xxx.xxx.xxx])
>  by orb.nisd.net (8.11.6/8.11.6) with ESMTP id j66IdKm10259
>  for <abuse at nisd.net>; Wed, 6 Jul 2005 13:39:20 -0500 
>   
> Our new headers appear thus: 
>   
> Return-path: <abuse at nisd.net>
> Received: from neworb.nisd.net
>  (neworb.northside.isd.tenet.edu [165.111.2.20])
>  by thor.nisd.net; Fri, 29 Jul 2005 12:35:15 -0500
> Received: from neworb.nisd.net (neworb.nisd.net [127.0.0.1])
>  by neworb.nisd.net (8.13.1/8.13.1) with ESMTP id j6THZ2aH013183
>  for <abuse at thor.northside.isd.tenet.edu>; Fri, 29 Jul 2005
> 12:35:07 -0500
> Received: (from abuse at localhost)
>  by neworb.nisd.net (8.13.1/8.13.1/Submit) id j6THZ2PT013182
>  for abuse at thor.northside.isd.tenet.edu; Fri, 29 Jul 2005
> 12:35:02 -0500
> Received: from xxxxx.com (xxxxx.xxxxx.xxxxxx.com [xxx.xxx.xxx.xxx])
>  by neworb.nisd.net (8.13.1/8.13.1) with ESMTP id j6THYooL013160
>  for <abuse at nisd.net>; Fri, 29 Jul 2005 12:34:56 -0500 
>   
> This looks like the system is scanning the local mail too now, so each email
> is getting scanned twice. If that's the case, what should I do about that? 
> Just to be clear, the only users that will ever be local on this box are
> system admins. 
>   
>   
> And a last word: 
> Happy Sys Admin day, and especially Julian for all the hard work. Thanks
> Julian! ($BEVERAGE of your choice awaits you when first we meet) 
>   
> ------------------------ MailScanner list ------------------------
>  To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>  'leave mailscanner' in the body of the email.
>  Before posting, read the Wiki (http://wiki.mailscanner.info/)
> and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html). 
> 
>  Support MailScanner development - buy the book off the website!
>  
Whitelist localhost (the IP, not the name). Examples in abundace, and
me to lazy to look them up for you.... Look at the wiki, MAQ,
EXAMPLES, the book, the list archives, Julians pocket......:-)

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!