Allow and block filenames on same domain

[Glenn Steen]

On 29/11/06, Corne Kotze <Cornek at synaq.com> wrote:
> Hi all,
>
> I have MailScanner setup on Linux, all is working 100%, but now the
> company wants to allow all managers and directors to receive almost
> anything, while the rest of the users are blocked.
> In /etc/MailScanner/filename.rules.conf - I have made some changes to
> allow for zip files etc for the managers and directors.
> Then I copied the file to:
> /etc/MailScanner/filename.rules.users.conf - Here I made all the changes
> to block all files needed to be blocked for the users.
>
> In /etc/MailScanner/rules/filename.rules - I have a number of entries
> for the managers and directors looking like this:
> To: email addres at domain.com /etc/MailScanner/filename.rules.conf
> And for the rest of the users it looks like this:
> *@domain.com /etc/MailScanner/filename.rules.users.conf
>
> Now for some reason if an email is sent with a .ppt attachment to a
> director that is supposed to be allowed, that email is blocked by one of
> the custom rules, example:
>
> #################################################################
>
> Our e-mail content detector has just been triggered by a message you sent:
>   To: email address at domain.com
>   Subject:  test 123
>   Date: Wed Nov 29 14:07:51 2006
>
> One or more of the attachments (Test.pps) are on
> the list of unacceptable attachments for this site and will not have
> been delivered.
>
> Consider renaming the files to avoid this constraint.
>
> The virus detector said this about the message:
> Report: Report: ScanSrv: Custom block (Test.pps)
>
> ##########################################################################
>
> But this attachment is allowed in: /etc/MailScanner/filename.rules.conf
> And the directors email address is pointing to this file.
>
> Any help please...
>
> Thank you
>
Your ruleset seems to be rather wrong. Take a look at the EXAMPLES in
the rules directory, and also look at the wiki...
http://wiki.mailscanner.info/doku.php?id=&idx=documentation:configuration:rulesets
and more specifically
http://wiki.mailscanner.info/doku.php?id=documentation:configuration:rulesets:overloading

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se