mailscanner and perdomain white and blacklists

Julian Field MailScanner at ecs.soton.ac.uk
Thu Feb 2 17:50:01 GMT 2006


Dimitri Yioulos wrote:
> Julian,
>
> I hope this isn't a totally lame question, but can the directives "Is 
> Definitely Not Spam" and Is Definitely Not Spam" take more than one argument 
> (point to multiple sources?  Here's why:
>   
You can do
From: friend at nicesite.com and 152.34. yes
into a ruleset.

Does that help?
If not, I don't quite understand what you are getting at.

> I have one colleague who emails me regularly from outside our system.  His 
> mail is marked as spam (listed in RBL, although his ISP doesn't seem to show 
> up in RBLs).  I want to whitelist him/exclude him from being scanned.  I'm 
> using SQLWhiteBlackList.pm, and it works for individual ip addresses.  I also 
> added a tweak to white/blacklist addresses based on the first three address 
> octets, but I'm not sure it that works.  As my colleague's ISP uses several 
> mail servers to send his mail, it's problematic to try and add every possible 
> mail server address to the whitelist.  I've tried adding his email address 
> and our domain to the whitelist, but that doesn't seem to work.  I also 
> created a file in the MailScanner rules dir called scan.messages.rules, added 
> him, and set Scan Messages = %rules_dir%/scan.messages.rules in MailScanner, 
> but no joy.
>
> How do I accomplish this?
>
> Regards,
>
> Dimitri
>
> PS - I cross-posted this to the Mailwatch list because I wasn't sure which was 
> appropriate - apologies if I boo-booed.
>
>
> On Thursday February 02 2006 12:28 pm, Julian Field wrote:
>   
>> There is code to do this in CustomConfig.pm in
>> /usr/lib/MailScanner/MailScanner. There is documentation in there that
>> will tell you how to enable the code and how to set everything up for
>> it. Look for the Per-Domain whitelist and blacklist code and you'll find
>> it, there is code in the same file for other add-on features as well.
>>
>> If you have trouble setting it up or getting it basically working, then
>> give me a shout (possibly on IRC) and I'll try to help where I can.
>>
>> It's not hard, you don't have to write any code or anything to make it
>> all work
>>
>> :-)
>>
>> Dave wrote:
>>     
>>> Hi Julian,
>>>    Thanks for your reply. I haven't had a moment yet to check out that
>>> boxes mailscanner.conf except except just a quick overview of the
>>> mta-specific settings. Can the spam whitelists and blacklists be used
>>> on a perdomain basis? For example, i've got domain1.com and
>>> domain2.com. The user at domain1.com wants a user added to his spam
>>> whitelist while the user at domain2.com wants a spammer added to his
>>> spam blacklist. Ideally i believe these users at domain 1 and 2 .com
>>> want independent lists.
>>> Thanks a lot.
>>> Dave.
>>>
>>> ----- Original Message ----- From: "Julian Field"
>>> <MailScanner at ecs.soton.ac.uk>
>>> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
>>> Sent: Thursday, February 02, 2006 4:09 AM
>>> Subject: Re: mailscanner and perdomain white and blacklists
>>>
>>>       
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>>
>>>> On 1 Feb 2006, at 23:32, Dave wrote:
>>>>         
>>>>> Hello,
>>>>>    I've got a mailscanner install with sendmail. It's working fine
>>>>> and it's working for multiple users. Now i'm getting requests from
>>>>> user a to add a username/domain to a blacklist file and user b to
>>>>> add another username/domain to a whitelist file. These i'm thinking
>>>>> should be separate as they are separate domains. This is on an fc4
>>>>> box. Is this doable, any help appreciated.
>>>>> Thanks.
>>>>> Dave.
>>>>>           
>>>> Blacklist or whitelist in what sense? You basically just need a
>>>> couple of rulesets, one for your blacklist and one for your
>>>> whitelist. There is already a spam.whitelist.rules which you can use
>>>> as a sample from which to create and use a spam.blacklist.rules file.
>>>> Look in MailScanner.conf for spam.whitelist.rules and you will see
>>>> how to refer a setting to a rules file.
>>>> - -- Julian Field
>>>> www.MailScanner.info
>>>> Buy the MailScanner book at www.MailScanner.info/store
>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>> Version: PGP Desktop 9.0.4 (Build 4042)
>>>>
>>>> iQEVAwUBQ+HMSPw32o+k+q+hAQFcjgf/b7C67K+nPF2k5yRxvHN4rmRhxSQuV+Eo
>>>> ALqzDcgMPMNSnHGBTC2S0C+XPgzx0Fa3RIMzw7vMIHDuL6O5Gme4C2Hco4B6+taX
>>>> vKISOpZ3mWI0HVWPYfytXBZwCBYG0MJBrIXDOr5pH/+R2HRxfQ0UGRkt63nojNiH
>>>> D668v55qOGNMjxGx0JR9qLJNQhxtFaGMBvmZ8D5j74B1H+UX/yhL15hXgvST1lyO
>>>> rQgiX+Fmc4ZIFhgc6G362AC5iSIh2ebXrYnyo9mt2Jdzu2KTScZjR7A0xKiPWOf5
>>>> uVmaHMRFV8TVe+068DKrdpnT0l9BDGuwW1aFznE5vAk2hCL3rz6jTA==
>>>> =2N0u
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> --
>>>> This message has been scanned for viruses and
>>>> dangerous content by MailScanner, and is
>>>> believed to be clean.
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>         
>> --
>> Julian Field
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>> Professional Support Services at www.MailScanner.biz
>> MailScanner thanks transtec Computers for their support
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>     
>
>   

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list