Request for comments 3
UxBoD
uxbod at splatnix.net
Tue Jul 24 14:46:13 IST 2007
Nice idea Steve. This RFC seems to be getting better and better :D
----- Original Message -----
From: "Steve Freegard" <steve.freegard at fsl.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Tuesday, July 24, 2007 2:37:31 PM (GMT) Europe/London
Subject: Re: Request for comments 3
Hi Jules,
Julian Field wrote:
> How about now? It's not in MCP yet, is that a problem? Shouldn't be, as
> it shouldn't actually make much difference to this functionality (it is
> working off SA rule names, not scores, so it doesn't matter if other
> rules fire as well).
Exactly what I was thinking - wouldn't this new method enable MCP-type
things but without the need for a second SA run (and the rather large
associated overhead of doing this).
You could simply create the MCP rules and score them as 0.001, then use
the new feature to quarantine if any of the MCP rule actually fire.
The only thing lacking here is the ability to quarantine the file in the
mcp quarantine instead of the spam quarantine. Maybe adding 'store:mcp'
could be an option to mark the message as MCP and store in the MCP
quarantine directory???
Kind regards,
Steve.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list