Request for comments 3
Julian Field
MailScanner at ecs.soton.ac.uk
Tue Jul 24 16:38:57 IST 2007
DAve wrote:
> Julian Field wrote:
>>
>>
>> Steve Freegard wrote:
>>> Hi Jules,
>>>
>>> Julian Field wrote:
>>>> How about now? It's not in MCP yet, is that a problem? Shouldn't
>>>> be, as it shouldn't actually make much difference to this
>>>> functionality (it is working off SA rule names, not scores, so it
>>>> doesn't matter if other rules fire as well).
>>>
>>> Exactly what I was thinking - wouldn't this new method enable
>>> MCP-type things but without the need for a second SA run (and the
>>> rather large associated overhead of doing this).
>>>
>>> You could simply create the MCP rules and score them as 0.001, then
>>> use the new feature to quarantine if any of the MCP rule actually fire.
>>>
>>> The only thing lacking here is the ability to quarantine the file in
>>> the mcp quarantine instead of the spam quarantine. Maybe adding
>>> 'store:mcp' could be an option to mark the message as MCP and store
>>> in the MCP quarantine directory???
>> I have just added 4 more actions:
>> store-nonspam
>> store-spam
>> store-nonmcp
>> store-mcp
>> The original "store" action is still there and will work exactly how
>> it always has done.
>
> So can we believe that a dir structure like so is setup?
Yes nearly.
>
> store-nonspam and store-nonmcp are stored here,
> /var/spool/MailScanner/quarantine/[date]/
These are stored in /var/spool/MailScanner/quarantine/[date]/non-spam
and .../non-mcp.
>
> store-spam is stored here,
> /var/spool/MailScanner/quarantine/[date]/spam/
>
> store-mcp is stored here,
> /var/spool/MailScanner/quarantine/[date]/mcp/
>
> DAve
>
Jules
--
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk
More information about the MailScanner
mailing list