Request for comments 3

UxBoD uxbod at splatnix.net
Tue Jul 24 14:46:13 IST 2007


Nice idea Steve. This RFC seems to be getting better and better :D
----- Original Message -----
From: "Steve Freegard" <steve.freegard at fsl.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Tuesday, July 24, 2007 2:37:31 PM (GMT) Europe/London
Subject: Re: Request for comments 3

Hi Jules,

Julian Field wrote:
> How about now? It's not in MCP yet, is that a problem? Shouldn't be, as 
> it shouldn't actually make much difference to this functionality (it is 
> working off SA rule names, not scores, so it doesn't matter if other 
> rules fire as well).

Exactly what I was thinking - wouldn't this new method enable MCP-type 
things but without the need for a second SA run (and the rather large 
associated overhead of doing this).

You could simply create the MCP rules and score them as 0.001, then use 
the new feature to quarantine if any of the MCP rule actually fire.

The only thing lacking here is the ability to quarantine the file in the 
mcp quarantine instead of the spam quarantine.  Maybe adding 'store:mcp' 
could be an option to mark the message as MCP and store in the MCP 
quarantine directory???

Kind regards,
Steve.
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list