scan for spam after filetype violation

[Alex Neuman]

Turn them on for legitimate users only? From specific IP's only? Turn them off for specific IP's?
On Feb 26, 2010, at 10:42 AM, Steven Andrews wrote:

> Unfortunately, we need the notifications because of the legit emails that come in (user names file with 14 periods, etc).
>  
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Garrod M. Alwood
> Sent: Friday, February 26, 2010 9:48 AM
> To: MailScanner discussion
> Subject: RE: scan for spam after filetype violation
>  
> turn off notifications.
>  
>  
> Garrod M. Alwood
> Consultant
> garrod.alwood at lorodoes.com
> 904.738.4988
> From: mailscanner-bounces at lists.mailscanner.info [mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews [sandrews at andrewscompanies.com]
> Sent: Friday, February 26, 2010 9:42 AM
> To: MailScanner discussion
> Subject: scan for spam after filetype violation
> 
> I’m getting a boatload of messages with a settings.exe or zip in them and the attachment filetype rules are triggering just fine, but we’re getting slammed with the resultant notifications.
>  
> I thought I could make a simple spamassassin rule to catch these, but it appears spam checks aren’t done if the file dumps out for the violation, virus, etc.
>  
> Is there any way to pass these message on thru so my SA rule traps them?
>  
> Thanks,
>  
> Steven R. Andrews, President 
> Andrews Companies Incorporated 
> Small Business Information Technology Consultants 
> sandrews at andrewscompanies.com 
> Phone: 317.536.1807
> "If your only tool is a hammer, every problem looks like a nail."
> 
> -- 
> This message has been scanned for viruses and 
> dangerous content by MailScanner, and is 
> believed to be clean.
> 
> -- 
> This message has been scanned for viruses and 
> dangerous content by MailScanner, and is 
> believed to be clean.
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!