Per domains / per email ID wise scanning in MailScanner

Dhaval Soni sonidhaval at gmail.com
Fri Aug 20 15:51:03 IST 2010


Dear All,

On Fri, Aug 20, 2010 at 5:31 PM, Dhaval Soni <sonidhaval at gmail.com> wrote:

> HI,
>
> On Fri, Aug 20, 2010 at 5:08 PM, Martin Hepworth <maxsec at gmail.com> wrote:
>
>> Sure, have a look in the wiki. Search on the word 'overloading' for some
>> wonderful things you can do with rulesets.
>>
>> I'd be careful of just doing domain wise as many spam have
>> from:fred at domain.com <from%3Afred at domain.com> and to:fred at domain.com<to%3Afred at domain.com>to try and get around domain level whitelists.
>>
>
> Can we use "To: @123.com  yes" to scan all emails instead of mentioning
> all email IDs of that domain?
>

Above rule I have tested and it is working well...


>
> Thank you,
>
>
>> Martin Hepworth
>> Oxford, UK
>>
>>
>> On 20 August 2010 12:23, Dhaval Soni <sonidhaval at gmail.com> wrote:
>>
>>> Dear All,
>>>
>>> We have one option in MailScanner.conf file which is "Scan Messages =yes
>>> / no". This will scan all incoming emails if yes is set otherwise not. Now
>>> suppose, If Scan Messages = %rules-dir%/scan.messages.rules set with default
>>> = no and it contains all email IDs which are required to filter via
>>> mailscanner. So my question is that, can we add whole domain instead of
>>> email IDs in %rules-dir%/scan.messages.rules file for scanning ?
>>>
>>> I am using MailScanner  4.79, Centos 5.5 with sendmail.
>>>
>>> Let me update, if required more information.
>>>
>>> Thank you,
>>>
>>> --
>>> Kind regards,
>>> Dhaval Soni
>>> Red Hat Certified Architect
>>> ID: 804 007 900 325 939
>>>
>>> M: +91-9662029620
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
>
> --
> Kind regards,
> Dhaval Soni
> Red Hat Certified Architect
> ID: 804 007 900 325 939
>
> M: +91-9662029620
>



-- 
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100820/8c05638e/attachment.html


More information about the MailScanner mailing list