quick rules question {Virus Scanned}

[Christo Bezuidenhout]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of ius
> Sent: 30 May 2006 03:05 AM
> To: MailScanner discussion
> Subject: Re: quick rules question {Virus Scanned}
> 
> sandrews at andrewscompanies.com wrote:
> > Why not mailscanner's blacklist? 
> >
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of 
> > Julian Field
> > Sent: Monday, May 29, 2006 5:35 AM
> > To: MailScanner discussion
> > Subject: Re: quick rules question
> >
> > You should do that in your MTA. In sendmail it's the 
> "access" database.
> >
> > ius wrote:
> >   
> >> Dear experts,
> >>
> >> Quick question. I like to block a miling list from yahoo, 
> for example
> >> : davincicrap at yahoogroups.com. How can i do that in 
> MailScanner rules?
> >>
> >>
> >> Thanks a lot
> >> ius
> >>
> >>     
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > Buy the MailScanner book at www.MailScanner.info/store Professional 
> > Support Services at www.MailScanner.biz MailScanner thanks transtec 
> > Computers for their support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >
> > --
> > This message has been scanned for viruses and dangerous content by 
> > MailScanner, and is believed to be clean.
> > MailScanner thanks transtec Computers for their support.
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website! 
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> >
> >
> >   
> yes .. I already do that. But i like to block the spesific 
> yahoogroups name, not the user names.
> This is my rules :
> 
> FromOrTo:               
> *plucky=anything.com at returns.groups.yahoo.com           yes
> FromOrTo:              
> *bugsbunny=anything.com at returns.groups.yahoo.com           yes
> FromOrTo:               default                     no
> 
> It blocks only users that joined any miling list in 
> yahoogroups. Any other suggestions ?
> 
> 
> Thanks
> ius
> 
> 
I have done the following.

I have setup a Spamassasin rule for this. I see all the messages I want to
block, the subject start with A1fun, As soon as SA get a message with this
in the subject it scores a 10 and is then classified as spam.

This is my rule in mailscanner.cf

#yahoo groups ####
describe        UDES_SUBA1Fun A1Fun Yahoo Groups
 header         UDES_SUBA1Fun Subject =~ /A1fun/i
 score          UDES_SUBA1Fun 10.0

Hope this helps.

Christo