Whitelisting rule query

[Julian Field]

On 27/05/2009 12:26, shyam hirurkar wrote:
> Hi Jules,
>
> I was not meant in that way , sincere apology for the use of the short 
> words.
No problem.
>
> Thanks a lot for the same. i have one more doubt i want rule in 
> highscore spam action can i use like this
>
> From: domain.com <http://domain.com> forward user at domain.com 
> <mailto:user at domain.com> store 
Correct.
> OR is it
>
> From:domain.com <http://domain.com> forward user at domain.com 
> <mailto:user at domain.com> and store
Wrong.

The "and" is only used to separate two conditions in a ruleset line. The 
result of the ruleset is everything that appears after the last 
condition, which in this case should be "forward user at domain.com store".
>
> Is really and required.
>
> basically i want to forward the high score spam to one email id and 
> also store in quarantine.
Yes, that sounds fine.
>
>
> Thanks ,
> Shyam
>
> On Wed, May 27, 2009 at 4:44 PM, Julian Field 
> <MailScanner at ecs.soton.ac.uk <mailto:MailScanner at ecs.soton.ac.uk>> wrote:
>
>     Please don't use "R u" instead of "Are you", it's just an abuse of
>     the English language.
>     Anyway, that syntax is just fine, you are allowed to combine two
>     tests with an "and" on the same line.
>
>     Cheers,
>     Jules.
>
>
>     On 27/05/2009 11:53, shyam hirurkar wrote:
>
>         Hello,
>
>         R u giving in the same line  From: domain and From IP and yes,
>         Hope this is wrong if not let me knwo i will also use the same
>         , Also if you give in different line then again you will get
>         spoof ID as you said earlier.
>
>         Shyam
>
>         On Wed, May 27, 2009 at 3:58 PM, Julian Field
>         <MailScanner at ecs.soton.ac.uk
>         <mailto:MailScanner at ecs.soton.ac.uk>
>         <mailto:MailScanner at ecs.soton.ac.uk
>         <mailto:MailScanner at ecs.soton.ac.uk>>> wrote:
>
>
>
>            On 27/05/2009 10:48, Stef Morrell wrote:
>
>                Hello,
>
>                I'm wanting to whitelist email coming from my office, so it
>                doesn't get
>                marked up as spam, in particular when discussing spammy
>         topics
>                with
>                colleagues/clients.
>
>                If I simply whitelist *@mydomain.com
>         <http://mydomain.com> <http://mydomain.com>
>
>                then this allows email with spoofed
>                'from' address throught.
>
>                I can't whitelist the mail relay, as there's any number of
>                domains email
>                running through it and if one of those users takes it upon
>                themselves to
>                throw a spam sandwich at it, I want to catch it and stop it
>                before the
>                wide wide world decides to blacklist me.
>
>                So, what I hope to be able to do is add a spam whitelisting
>                rule along
>                the lines of
>
>                From: *@mydomain and From:<IP ADDRESS>
>
>                Does this makes sense and is it achieveable?
>
>            Yes, and you have even got the syntax right. Just add a
>         "yes" on
>            the end of the line and put it in
>            /etc/MailScanner/rules/spam.whitelist.rules. Then do a "service
>            MailScanner reload" and it will re-read the configuration, and
>            away you go.
>
>
>                Regards
>
>                Stef
>                --
>                Stefan Morrell          | Operations Director
>                Tel: 0845 3452820       | Alpha Omega Computers Ltd
>                Fax: 0845 3452830       | Incorporating Level 5 Internet
>         stef at aoc-uk.com <mailto:stef at aoc-uk.com>
>         <mailto:stef at aoc-uk.com <mailto:stef at aoc-uk.com>>         |
>         stef at l5net.net <mailto:stef at l5net.net> <mailto:stef at l5net.net
>         <mailto:stef at l5net.net>>
>
>
>
>            Jules
>
>            --    Julian Field MEng CITP CEng
>         www.MailScanner.info <http://www.MailScanner.info>
>         <http://www.MailScanner.info>
>
>            Buy the MailScanner book at www.MailScanner.info/store
>         <http://www.MailScanner.info/store>
>         <http://www.MailScanner.info/store>
>
>
>            Need help customising MailScanner?
>            Contact me!
>            Need help fixing or optimising your systems?
>            Contact me!
>            Need help getting you started solving new requirements from
>         your boss?
>            Contact me!
>
>            PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415
>         B654
>            Follow me at twitter.com/JulesFM
>         <http://twitter.com/JulesFM> <http://twitter.com/JulesFM> and
>         twitter.com/MailScanner <http://twitter.com/MailScanner>
>         <http://twitter.com/MailScanner>
>
>
>
>            --    This message has been scanned for viruses and
>            dangerous content by MailScanner, and is
>            believed to be clean.
>
>
>            --    MailScanner mailing list
>         mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>
>         <mailto:mailscanner at lists.mailscanner.info
>         <mailto:mailscanner at lists.mailscanner.info>>
>
>         http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>            Before posting, read http://wiki.mailscanner.info/posting
>
>            Support MailScanner development - buy the book off the website!
>
>
>
>     Jules
>
>     -- 
>     Julian Field MEng CITP CEng
>     www.MailScanner.info <http://www.MailScanner.info>
>     Buy the MailScanner book at www.MailScanner.info/store
>     <http://www.MailScanner.info/store>
>
>     Need help customising MailScanner?
>     Contact me!
>     Need help fixing or optimising your systems?
>     Contact me!
>     Need help getting you started solving new requirements from your boss?
>     Contact me!
>
>     PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>     Follow me at twitter.com/JulesFM <http://twitter.com/JulesFM> and
>     twitter.com/MailScanner <http://twitter.com/MailScanner>
>
>
>     -- 
>     This message has been scanned for viruses and
>     dangerous content by MailScanner, and is
>     believed to be clean.
>
>     -- 
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.