Deleting detected spam for some addresses only

[Steve Campbell]

----- Original Message ----- 
From: "Glenn Steen" <glenn.steen at gmail.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Wednesday, April 25, 2007 11:08 AM
Subject: Re: Deleting detected spam for some addresses only


> On 24/04/07, Steve Campbell <campbell at cnpapers.com> wrote:
>>
>> ----- Original Message -----
>> From: "Glenn Steen" <glenn.steen at gmail.com>
>> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
>> Sent: Tuesday, April 24, 2007 10:06 AM
>> Subject: Re: Deleting detected spam for some addresses only
>>
>>
>> > On 24/04/07, Ed Bruce <edwardbruce at sbcglobal.net> wrote:
>> >> -----BEGIN PGP SIGNED MESSAGE-----
>> >> Hash: SHA1
>> >>
>> >> Glenn Steen wrote:
>> > (snip)
>> >> > MailScanner --value=highscoringspamactions --from=glenn.steen at ap1.se
>> >> > --to=some at add.res --ip=127.0.0.1
>> >> > Looked up internal option name "highscorespamactions"
>> >> > With sender = glenn.steen at ap1.se
>> >> >  recipient = some at add.res
>> >> > Client IP = 127.0.0.1
>> >> > Virus =
>> >> > Result is "store delete"
>> >> > .... you get the picture:-).
>> >> > When you've got it right, just reload/restart MailScanner...
>> >> >
>> >> > Cheers
>> >>
>> >> Interesting. What values are valid with "--value" ???
>> >
>> > Everything in the MailScanner.conf file that is a valid lval,
>> > basically. That is: Any option in that file... just lowercase
>> > (optional, I think) and runtogether (no whitespace) and you're set.
>> > You can also use the internal shorthand from ConfigDefs.pl ... Use
>> > "MailScanner --help" to get some more ideas (supply a virus name or
>> > somesuch and see what happens ...).
>> >
>> > Cheers
>> > --
>> > -- Glenn
>> Glenn,
>>
>> Can you explain this a little more?  All I seem to get is "store delete" 
>> for
>> any options. I have an IP in my spam.whitelist.rules.conf and used it
>> as --ip=xxx.xxx.xxx.xxx along with the --value=highscoringspamactions
>> thinking I should have received something other than store, delete.
>>
>> Call me confused.
> Ok Confused, I will:-):-).
>
> Anyway, the likely reasons might be that you are3 a) testing the wrong
> setting, b) have a flawed ruleset/understanding of its application
> (... I'm not pointing any fingers of calling any names here...:-)
>
> For me it works flawlessly... Checking something I've got a ruleset
> for IP addresses on:
>
> # egrep "Virus Scanning" /etc/MailScanner/MailScanner.conf|egrep -v "^#""
> Virus Scanning = %rules-dir%/virus.whitelist.rules
> # cat /etc/MailScanner/rules/virus.whitelist.rules |egrep -v "^#"
> From:   127.0.0.1                               no
> FromOrTo:       default                 yes
> # MailScanner --value="virusscanning" --ip=127.0.0.1
> Looked up internal option name "virusscan"
> With sender =
> Client IP = 127.0.0.1
> Virus =
> Result is "0"
>
> 0=No 1=Yes
> # MailScanner --value="virusscanning" --ip=127.0.0.2
> Looked up internal option name "virusscan"
> With sender =
> Client IP = 127.0.0.2
> Virus =
> Result is "1"
>
> 0=No 1=Yes
> #
>
> So... as you see, it works very well for me;).

For me also, now. I was misunderstanding the purpose of "value", thinking 
that was something to supply data to the function, not requesting the value 
of "value".

You can stop calling me "Confused" now and thanks for the enlightenment.

Steve

>
> Cheers
> -- 
> -- Glenn