How to ignore all outgoing mail in MailScanner

[Charles Lacroix]

Ronny T. Lampert a écrit :
> Hi all,
>
> after endless searching with Google I did not find any solution to the 
> following problem (well, I found 
> http://lists.mailscanner.info/pipermail/mailscanner/2006-October/066594.html 
> - but is this still the best way to go?)
>
> All outgoing mails (= mails received from internal, trusted servers) 
> MUST NOT be scanned by MailScanner.
>
> ATM I'm using the postfix setup with header_checks enabled, but this 
> (of course) causes ALL MAIL to be scanned by MailScanner.
>
>
> postfix has this nice "permit_mynetworks" keyword to bypass all checks 
> for internal servers.
>
> 1) Is there a clean way to NOT PASS any mails from a list of relays to 
> MailScanner at all (by postfix)?
>
> -OR-
>
> 2) Is there a similar keyword for Mailscanner so it ignores those 
> mails completely?
>
>
> Has anybody a suggestion how to implement that the most clean way?
> It's not just a couple of IPs...
>
>
> Cheers,
> Ronny
Hi,

just like this, i would try to experiment with a ruleset on this 
paticular option:

# If this is set to yes, then email messages passing through MailScanner
# will be processed and checked, and all the other options in this file
# will be used to control what checks are made on the message.
# If this is set to no, then email messages will NOT be processed or
# checked *at all*, and so any viruses or other problems will be ignored.
#
# The purpose of this option is to set it to be a ruleset, so that you
# can skip all scanning of mail destined for some of your users/customers
# and still scan all the rest.
# A sample ruleset would look like this:
#   To:       bad.customer.com  no
#   From:     ignore.domain.com no
#   FromOrTo: default           yes
# That will scan all mail except mail to bad.customer.com and mail from
# ignore.domain.com. To set this up, put the 3 lines above into a file
# called /etc/MailScanner/rules/scan.messages.rules and set the next line to
# Scan Messages = %rules-dir%/scan.messages.rules
# This can also be the filename of a ruleset (as illustrated above).
Scan Messages = yes

I really think there is something you can do with this option.
On the other hand, you can also whitelist your servers so they don't get
tagged as spam.

later,
Charles