Deleting detected spam for some addresses only

Glenn Steen glenn.steen at gmail.com
Wed Apr 25 16:08:29 IST 2007


On 24/04/07, Steve Campbell <campbell at cnpapers.com> wrote:
>
> ----- Original Message -----
> From: "Glenn Steen" <glenn.steen at gmail.com>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Tuesday, April 24, 2007 10:06 AM
> Subject: Re: Deleting detected spam for some addresses only
>
>
> > On 24/04/07, Ed Bruce <edwardbruce at sbcglobal.net> wrote:
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
> >>
> >> Glenn Steen wrote:
> > (snip)
> >> > MailScanner --value=highscoringspamactions --from=glenn.steen at ap1.se
> >> > --to=some at add.res --ip=127.0.0.1
> >> > Looked up internal option name "highscorespamactions"
> >> > With sender = glenn.steen at ap1.se
> >> >  recipient = some at add.res
> >> > Client IP = 127.0.0.1
> >> > Virus =
> >> > Result is "store delete"
> >> > .... you get the picture:-).
> >> > When you've got it right, just reload/restart MailScanner...
> >> >
> >> > Cheers
> >>
> >> Interesting. What values are valid with "--value" ???
> >
> > Everything in the MailScanner.conf file that is a valid lval,
> > basically. That is: Any option in that file... just lowercase
> > (optional, I think) and runtogether (no whitespace) and you're set.
> > You can also use the internal shorthand from ConfigDefs.pl ... Use
> > "MailScanner --help" to get some more ideas (supply a virus name or
> > somesuch and see what happens ...).
> >
> > Cheers
> > --
> > -- Glenn
> Glenn,
>
> Can you explain this a little more?  All I seem to get is "store delete" for
> any options. I have an IP in my spam.whitelist.rules.conf and used it
> as --ip=xxx.xxx.xxx.xxx along with the --value=highscoringspamactions
> thinking I should have received something other than store, delete.
>
> Call me confused.
Ok Confused, I will:-):-).

Anyway, the likely reasons might be that you are3 a) testing the wrong
setting, b) have a flawed ruleset/understanding of its application
(... I'm not pointing any fingers of calling any names here...:-)

For me it works flawlessly... Checking something I've got a ruleset
for IP addresses on:

# egrep "Virus Scanning" /etc/MailScanner/MailScanner.conf|egrep -v "^#""
Virus Scanning = %rules-dir%/virus.whitelist.rules
# cat /etc/MailScanner/rules/virus.whitelist.rules |egrep -v "^#"
From:   127.0.0.1                               no
FromOrTo:       default                 yes
# MailScanner --value="virusscanning" --ip=127.0.0.1
Looked up internal option name "virusscan"
With sender =
Client IP = 127.0.0.1
Virus =
Result is "0"

0=No 1=Yes
# MailScanner --value="virusscanning" --ip=127.0.0.2
Looked up internal option name "virusscan"
With sender =
Client IP = 127.0.0.2
Virus =
Result is "1"

0=No 1=Yes
#

So... as you see, it works very well for me;).

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se


More information about the MailScanner mailing list