query regarding qurantine release

[Scott Silva]

Mail Administrator spake the following on 9/4/2007 2:07 PM:
>> How does your webmail send the mail?
>> Does it make a smtp connection or run sendmail locally?
>>
>> If it makes a SMTP connection then you could probably configure it to
>> connect to the servers real IP address and not 127.0.0.1 and then it
>> should
>> work.
>>
> 
> Thanks for ur quick reply
> really appreciate
> 
> sendmail runs locally
> 
> here my mail log when i send a message for more info.
> 
> ----------------------------------------
> 
> ep  5 00:03:07 kmdns1 sendmail[32523]: l84L36FM032523:
> from=simon at kmun.gov.kw, size=652, class=0, nrcpts=1,
> msgid=<3964.62.150.152.226.1188939786.squirrel at webmail.baladia.gov.kw>,
> relay=apache at localhost
> Sep  5 00:03:07 kmdns1 sendmail[32524]: l84L37UE032524:
> from=<simon at kmun.gov.kw>, size=877, class=0, nrcpts=1,
> msgid=<3964.62.150.152.226.1188939786.squirrel at webmail.baladia.gov.kw>,
> proto=ESMTP, daemon=MTA, relay=kmdns1.kmun.gov.kw [127.0.0.1]
> Sep  5 00:03:07 kmdns1 sendmail[32524]: l84L37UE032524:
> to=<guy20034u at yahoo.com>, delay=00:00:00, mailer=esmtp, pri=30877,
> stat=queued
> 
> ------------------------------------
> 
> 62.150.152.226 is a ip of my machine
> 
> since my sendmail runs locally on ip 127.0.0.1 how could i go arround
> solving this problem .
> apprecite your help
> 
> regards
> 
> simon
> 
> 
> 
>>> -----Original Message-----
>>> From: mailscanner-bounces at lists.mailscanner.info
>>> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of
>>> Mail Administrator
>>> Sent: 04 September 2007 21:28
>>> To: MailScanner discussion
>>> Subject: query regarding qurantine release
>>>
>>>
>>> Dear All,
>>>
>>>
>>> I have the following setup on my server
>>>
>>> 1) Centos
>>> Primary Mail server
>>> Primary dns server
>>> Mailscanner
>>> Webmail server
>>>
>>> most of the users use their browser to login to the above server for
>>> sending and checking their mails
>>> everything is been workin perfectly
>>>
>>> i installed mailwatch so that i could release quarantine mails at
>>> my decision
>>>
>>> i then followed the exact steps as mentioned in the FAQ
>>>
>>> http://mailwatch.sourceforge.net/doku.php?id=mailwatch:faq
>>>
>>> and now i tried to test
>>>
>>> i sent a mail with attachment from my Yahoo account to my local mail
>>> server and it was blocked my mailscanner whcih is perfect
>>> n i logged in mailwatch and i could release the attachment and after i
>>> released if went perfectly to my mailbox. thats grt
>>>
>>> now i sent a mail with attachemnt from my local account using webmail to
>>> my yahoo account and it went perfectly fine
>>>
>>> and in my mailwatch details ..
>>> status as whitelist
>>> spam score 0.00
>>>
>>> since 127.0.0.1 is white listed as per the rules..
>>>
>>> So i see that Mailscanner n mailwatch works jus perfect for the mails
>>> received its grt
>>>
>>> but i have queries regading mail sent by users using the browser
>>> with webmail
>>>
>>> 1) does mailscanner do a virus n spam check on the mails sent since i
>>> see
>>> in mailwatch the status is
>>>
>>> status as whitelist
>>> spam score 0.00
>>> cause if this does not happen then the users pc inefcted will cause the
>>> mail server to spam or send infected mails out
>>>
>>> 2) obviously i would like mailscanner to scan and block any attachments
>>> sent by my users via webmail and they should only be sent when released
>>> from quarantine with mailwatch
>>>
>>> how do i the above .. setup rules for doin that
>>>
>>> basically i see that after i implemented the steps in FAQ regarding the
>>> release of quarantine mails i see that it works perfect for mails with
>>> attachment received and not for mails sent
>>>
>>>
>>> really wd apprecite your help
>>>
>>>
>>> Regards
>>>
>>> Simon
In your conf.php in the mailwatch directory you have a setting like;
define(QUARANTINE_FROM_ADDR, 'postmaster');

Change all the rules to have From: 127.0.0.1 and From: postmaster at localhost no
(notice the "and From:" part)

Change postmaster to what you have in your conf.php.
This way it will only whitelist messages that match "both" choices, which your 
webmail users won't hit.

-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!