whitelist a file from the content scanner

Simon Annetts simon at ateb.co.uk
Thu Oct 19 09:05:10 IST 2006


Julian Field wrote:
> Martin Hepworth wrote:
>> Simon Annetts wrote:
>>> Hi,
>>> I need to be able to stop mailscanner from virus checking and 
>>> filetype detecting a particular filename so that our support team can 
>>> send updates via email. The file will always be called (for example 
>>> only:) update.zip and may contain .exe and other type files that are 
>>> normally banned.
>>>
>>> At the moment mailscanner always rejects the file and quarantines it 
>>> because it is in the banned filetypes list. If I exempt .zip files or 
>>> specifically update.zip then mailscanner proceeds to unpack the file 
>>> and quarantine any files inside which also are banned. This is all 
>>> good stuff as far as mailscanner doing its job, but I want this file 
>>> to pass through mailscanner completely untouched/unchecked. I want to 
>>> exempt this file name from all checks,  - spam virus content and 
>>> filetype.
>>>
>>>
>>> Is this possible???
>>> Best Regards
>>> Simon
>>>
>>>
>> Simon
>>
>> I'd do this by originating ip-address if I where you....put a ruleset 
>> on the checks, so if its from you're lan you don't run the extra 
>> filename checks etc...
> To just allow this one filename, add a new filename.rules.conf file (as 
> per the instructions in the wiki) with 1 rule at the top that says
> allow   ^my\.file\.name$    -   -
> Note those 4 fields are separated with *tab* characters and not spaces. 
> This is the 1 place (filename.rules.conf and filetype.rules.conf) where 
> MailScanner is fussy about the types of spaces you use as a separator.
> Otherwise, how would you match against a filename pattern that contained 
> a space?
> You will also have to make sure it passes the file-type checks as well, 
> with a similar trick.
> 
> You've got a little bit of reading to do, this is about as complex as it 
> can get, sorry.
> 
> Jules

Thanks for the info I'll have a go this morning and also schedule some 
quiet reading time (if only!) :-)


Simon


> 
> - -- 
> Julian Field MEng CITP
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.5.0 (Build 1112)
> Comment: Fetch my public key foot-print from www.mailscanner.info
> Charset: ISO-8859-1
> 
> wj8DBQFFNmEjEfZZRxQVtlQRAqXGAJ4lwGs3LgGvGjBSXJjAXPlwn8xSMQCg9MaM
> DBmtAau/m+MwHxU6nSiYSSw=
> =ipu5
> -----END PGP SIGNATURE-----
> 


More information about the MailScanner mailing list