Notify sender of viruses Only when they belong to my
internal network
Jorge Costinha
jlcostinha at halla.pt
Tue Jan 23 10:30:14 CET 2007
i got it Steve,
my default setting was
Silent Viruses = HTML-IFRAME All-Viruses
which means, all emails containing any viruses sent to my network their respective senders would not get notify, exception made for HTML-IFRAME.
I also had "Delivery Silent Viruses = no" which cause the "vanishing" of those internal emails, password protected. This explains why neither Sender or recipient got any warning.
This option have precedence than "Notify Senders of Viruses = yes".
thanks to you i solve the problem this way:
Silent Viruses = HTML-IFRAME
Delivery Silent Viruses = %rules-dir%/NotifyVirusRecipients.rules
Notify Senders of Viruses = %rules-dir%/NotifyVirusSenders.rules
contents of NotifyVirusSenders.rules
From: 192.168.10. yes
FromOrTo: Default no
contents of NotifyVirusRecipients.rules
FromOrTo: 192.168.10. yes
FromOrTo: Default no
Viruses Senders : from internal network they get a notification, from external they wont.
Recipients: from internal network they will be warned of the attempt, from external they wont.
once again, thanks a lot for your help!
Best Regards,
Jorge Costinha
> Jorge,
> Jorge Costinha wrote:
>> greatings all,
>> here what i have tried, unsuccessful:
>> in Mailscanner.conf
>> Notify Senders of Viruses = %rules-dir%/NotifyVirusSenders.rules
>> contents of NotifyVirusSenders.rules
>> From: 192.168.10. yes
>> FromOrTo: Default no
>> ive tried change the ip to my domain, something like
>> From: *@mydomain.com <mailto:*@mydomain.com> yes
>> didnt work. the purpose of this started when someone inside my network
>> sent an excel password-protected file. The email wasnt delivered and the
>> sender didnt get any notification. I figure that internal users should
>> be receive notifications. if anyone has a better idead, i would
>> appreciate. Anyway, i cant seem to identify the problem.
> Check your setting for 'Silent Viruses' and read up on what this option
> does, you'll probably need a ruleset on this which returns a blank value
> for 192.168.10.
> Cheers,
> Steve.
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> Before posting, read http://wiki.mailscanner.info/posting
> Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by HCC MailScanner, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070123/1c0ca0e4/attachment-0001.html
More information about the MailScanner
mailing list