Notify sender of viruses Only when they belong to my internal network

Jorge Costinha jlcostinha at halla.pt
Tue Jan 23 10:30:14 CET 2007


i got it Steve,

     my default setting was

  Silent Viruses =  HTML-IFRAME All-Viruses

which means, all emails containing any viruses sent to my network their respective senders would not get notify, exception made for HTML-IFRAME.
I also had "Delivery Silent Viruses = no" which cause the "vanishing" of those internal emails, password protected. This explains why neither Sender or recipient got any warning.

This option have precedence than "Notify Senders of Viruses = yes". 


thanks to you i solve the problem this way:

Silent Viruses =  HTML-IFRAME
Delivery Silent Viruses = %rules-dir%/NotifyVirusRecipients.rules
Notify Senders of Viruses = %rules-dir%/NotifyVirusSenders.rules


contents of NotifyVirusSenders.rules

 From:            192.168.10.        yes
 FromOrTo:        Default            no

contents of NotifyVirusRecipients.rules

 FromOrTo:        192.168.10.        yes
 FromOrTo:        Default            no

Viruses Senders : from internal network they get a notification, from external they wont.
Recipients: from internal network they will be warned of the attempt, from external they wont.

once again, thanks a lot for your help!

Best Regards,

Jorge Costinha


> Jorge,

> Jorge Costinha wrote:
>> greatings all,



>> here what i have tried, unsuccessful:


>> in Mailscanner.conf
>> Notify Senders of Viruses = %rules-dir%/NotifyVirusSenders.rules

>> contents of NotifyVirusSenders.rules

>> From:                192.168.10.        yes
>> FromOrTo:        Default        no

>> ive tried change the ip to my domain, something like

>> From: *@mydomain.com <mailto:*@mydomain.com> yes 

>> didnt work. the purpose of this started when someone inside my network 
>> sent an excel password-protected file. The email wasnt delivered and the 
>> sender didnt get any notification. I figure that internal users should 
>> be receive notifications. if anyone has a better idead, i would 
>> appreciate. Anyway, i cant seem to identify the problem. 

> Check your setting for 'Silent Viruses' and read up on what this option
> does, you'll probably need a ruleset on this which returns a blank value
> for 192.168.10.

> Cheers,
> Steve.
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner

> Before posting, read http://wiki.mailscanner.info/posting

> Support MailScanner development - buy the book off the website! 

-- 
This message has been scanned for viruses and
dangerous content by HCC MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070123/1c0ca0e4/attachment-0001.html


More information about the MailScanner mailing list