scan for spam after filetype violation

[Steven Andrews]

Never said I was.  They're blocked in filetype.rules.  What I'm after is
having the message continue to score so that SA rules can intervene and
take it up to the highspam action.

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Garrod
M. Alwood
Sent: Friday, February 26, 2010 10:40 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation

 

Mailscanner is smarter than that to know the difference. Also you
shouldn't be accepting .exe's anyway.

 

 

Garrod M. Alwood

Consultant

garrod.alwood at lorodoes.com

904.738.4988

________________________________

From: mailscanner-bounces at lists.mailscanner.info
[mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews
[sandrews at andrewscompanies.com]
Sent: Friday, February 26, 2010 10:42 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation

Unfortunately, we need the notifications because of the legit emails
that come in (user names file with 14 periods, etc).

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Garrod
M. Alwood
Sent: Friday, February 26, 2010 9:48 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation

 

turn off notifications.

 

 

Garrod M. Alwood

Consultant

garrod.alwood at lorodoes.com

904.738.4988

________________________________

From: mailscanner-bounces at lists.mailscanner.info
[mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews
[sandrews at andrewscompanies.com]
Sent: Friday, February 26, 2010 9:42 AM
To: MailScanner discussion
Subject: scan for spam after filetype violation

I'm getting a boatload of messages with a settings.exe or zip in them
and the attachment filetype rules are triggering just fine, but we're
getting slammed with the resultant notifications.

 

I thought I could make a simple spamassassin rule to catch these, but it
appears spam checks aren't done if the file dumps out for the violation,
virus, etc.

 

Is there any way to pass these message on thru so my SA rule traps them?

 

Thanks,

 

Steven R. Andrews, President 
Andrews Companies Incorporated 
Small Business Information Technology Consultants 
sandrews at andrewscompanies.com 
Phone: 317.536.1807

"If your only tool is a hammer, every problem looks like a nail." 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is

believed to be clean. 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is

believed to be clean. 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is

believed to be clean. 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is

believed to be clean. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100226/4b6b8c1c/attachment.html