One user whitelisted, everyone gets the spam...

[Martin.Hepworth]

Mel

Well you need to split the incoming email into individual recipients for this work properly.

See the wiki for your MTA on how to do this..

Eg for sendmail its...

"http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient"

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of mailscanner at herald.co.uk
> Sent: 24 September 2007 14:10
> To: mailscanner at lists.mailscanner.info
> Subject: One user whitelisted, everyone gets the spam...
>
> Hi folks,
>
> MailScanner 4.60.8 using ClamAV...
>
> For various long and dull reasons, we have a single user whose mail is
> not filtered by MailScanner; this is done by a "deliver" rule in a
> ruleset attached to Spam Actions.
>
> Annoyingly (to the other users...) this is causing spam to leak through
> to them, if mail's sent to a bunch of people including this user (where
> a "bunch" is fewer than 20, that being what "Ignore Spam Whitelist If
> Recipients Exceed" is currently set to). The worst example I've seen so
> far is a spam scoring 165 getting through... our usual "delete"
> threshold is 12.
>
> I thought about reducing the "Ignore Spam Whitelist" setting, but we do
> legitimately get emails in addressed to more users than these spams have
> been (12 - 15 users; the spams have been addressed to around 8 or so)
>
> Is there a relatively straightforward way of stopping this user's
> settings from affecting anyone else? (Politics sadly dictates that
> insisting on filtering his mail in the same way as everyone else's is
> not a viable way forward.)
>
> Thanks
>
> Mel
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************