html-script attachment checking

Julian Field MailScanner at ecs.soton.ac.uk
Fri Jun 3 13:51:59 IST 2005


You have your yes and no the wrong way round.
For mail from localhost and from awkwardsupplier.com you want to  
allow scripts (i.e. yes), but other mail you want to disallow scripts  
(i.e. no).

The symptom you might have noticed, which indicates you have done  
something wrong, is that you were changing a setting of "no" to a  
ruleset for which the default value is "yes".


On 3 Jun 2005, at 12:20, Steve Spiller wrote:

> I'm new to MailScanner configuration, and want to check something  
> before I make changes to our working email server after a bad  
> experience with a slight change to our Firewall.
> MailScanner is currently configured to reject all emails which have  
> an attachment with html scripting (which I understand to be a Good  
> Thing). Except one of our suppliers insists that they send their  
> RMA form unzipped, with loads of scripting. They say that their  
> system does not allow them to compress/rename the form prior to  
> sending. From reading the archives and manuals, I gather I need to  
> do something like the following:
>
> 1. create a htmlscript.allow.rules (or other name) with the  
> following contents:
> From:   127.0.0.1       no
> From:   *@awkwardsupplier.com       no
> FromOrTo:       default yes
>
> 2. Change MailScanner.conf from:
> Allow Script Tags = no
> to:
> Allow Script Tags = /opt/MailScanner/etc/rules/htmlscript.allow.rules
>
> Am I correct in believing this will allow virus scanning on their  
> emails, but allow the RMA Form to be received?
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
>

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list