Dont Scan if from certain IP

[Martin Hepworth]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

the rule file for server 1 should be something like..

To:     *@domain.com    yes
FromOrTo:       default         no

and driven from the Spam Checks option in MailScanner.conf should be fine.

For server 2


From: 1.2.3.4 AND To: *@domain.co.uk no
To: *@domain.co.uk yes
FromOrToTo: default no

Again driven from the Spam Checks option.

Rule will process th rule file until it reaches a match. Therefore the 
most retrictive rules need to be placed first in the rule file.  So if 
default is first in the file, that will match and no other checks will 
be done.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Paul Houselander wrote:
> Emm
> 
> Just tried setting the default to the last entry and its still getting
> scanned twice.
> 
> I maybe wrong but I thought it didnt matter where the default entry was in
> the rules file.
> 
> Cheers
> Paul
> 
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Dörfler Andreas
> Sent: 16 March 2005 10:51
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Dont Scan if from certain IP
> 
> 
> default must be the last entry, not the first
> 
> To: *@domain.co.uk yes
> To: default no
> 
> greetings
> andy
> 
> --free your mind, use open source
> http://www.mono-project.com
> 
> ASCII ribbon campaign ( )
>  - against HTML email  X
>              & vCards / \
> 
> 
> 
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Paul Houselander
>>Sent: Wednesday, March 16, 2005 11:51 AM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Dont Scan if from certain IP
>>
>>
>>Hi
>>
>>Ive got a server running mailscanner (call it server1) that
>>scans a domain
>>for spam. In Mailscanner.conf I have
>>
>>Use SpamAssassin = %rules-dir%/spam.rules
>>
>>In spam.rules I have
>>
>>To: default no
>>To: *@domain.co.uk yes
>>
>>This server just relays mail onto another server (server2)
>>which also runs
>>Mailscanner. I dont want mail that has been scanned on server 1 to be
>>scanned again on server2 so have
>>
>>Use SpamAssassin = %rules-dir%/spam.rules in MailScanner.conf
>>
>>and
>>
>>To: default no
>>From: 1.2.3.4 AND To: *@domain.co.uk no (where 1.2.3.4 is the
>>ip of server1)
>>To: *@domain.co.uk yes
>>
>>in spam.rules
>>
>>Problem is the mail gets scanned on both, is this the correct
>>way to achieve
>>what im trying to do?
>>
>>Thanks
>>
>>Paul
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
> 
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!