scan for spam after filetype violation

[Garrod M. Alwood]

I agree with the earlier email saying use rules for the notifications.

Garrod Alwood
Open Source Consultant
9047384988
Garrod.alwood at lorodoes.com<mailto:Garrod.alwood at lorodoes.com>
Sent from my iPod

On Feb 26, 2010, at 3:56 PM, "Steven Andrews" <sandrews at andrewscompanies.com<mailto:sandrews at andrewscompanies.com>> wrote:

Never said I was.  They’re blocked in filetype.rules.  What I’m after is having the message continue to score so that SA rules can intervene and take it up to the highspam action.

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Garrod M. Alwood
Sent: Friday, February 26, 2010 10:40 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation

Mailscanner is smarter than that to know the difference. Also you shouldn't be accepting .exe's anyway.


Garrod M. Alwood
Consultant
<mailto:garrod.alwood at lorodoes.com>garrod.alwood at lorodoes.com<mailto:garrod.alwood at lorodoes.com>
904.738.4988
________________________________
From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews [sandrews at andrewscompanies.com]
Sent: Friday, February 26, 2010 10:42 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation
Unfortunately, we need the notifications because of the legit emails that come in (user names file with 14 periods, etc).

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Garrod M. Alwood
Sent: Friday, February 26, 2010 9:48 AM
To: MailScanner discussion
Subject: RE: scan for spam after filetype violation

turn off notifications.


Garrod M. Alwood
Consultant
<mailto:garrod.alwood at lorodoes.com>garrod.alwood at lorodoes.com<mailto:garrod.alwood at lorodoes.com>
904.738.4988
________________________________
From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews [sandrews at andrewscompanies.com]
Sent: Friday, February 26, 2010 9:42 AM
To: MailScanner discussion
Subject: scan for spam after filetype violation
I’m getting a boatload of messages with a settings.exe or zip in them and the attachment filetype rules are triggering just fine, but we’re getting slammed with the resultant notifications.

I thought I could make a simple spamassassin rule to catch these, but it appears spam checks aren’t done if the file dumps out for the violation, virus, etc.

Is there any way to pass these message on thru so my SA rule traps them?

Thanks,

Steven R. Andrews, President
Andrews Companies Incorporated
Small Business Information Technology Consultants
sandrews at andrewscompanies.com<mailto:sandrews at andrewscompanies.com>
Phone: 317.536.1807
"If your only tool is a hammer, every problem looks like a nail."

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.
<ATT00001..txt>

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100226/4be28571/attachment.html