Maximum Message Size, how do rules work?

[Martin Hepworth]

Does user1 at domain.com sending internally to domain.com go via MS at all???

Are there any MS email headers in the message when recieved to show that MS
has indeed scanned it?

Have you got anything in the "Scan Messages" messages if its from and to
domain.com and from an internal address that says don't scan the email?


-- 
Martin Hepworth
Oxford, UK


On 22 September 2010 15:52, Jason Voorhees <jvoorhees1 at gmail.com> wrote:

> Hi people:
>
> I'm using MailScanner 4.79.11 on RHEL 5.4 x86_64 with a setting like this:
>
> Maximum Message Size = %rules-dir%/max.message.size.rules
> Maximum Attachment Size = -1
>
> My max.message.size.rules look like this:
>
> From: user1 at domain.com 1M
> From: user2 at domain.com 2M
> From: user3 at domain.com 4M
> From: *@domain.com 512K
> To: *@domain.com 2M
> FromOrTo: default 0
>
> According to this I'm having some issues with rules not working as
> expected so I have some questions:
>
> 1. "Maximum Message Size" evals the size of a whole message including
> all its attachments, right?.
>
> 2. If I have "Maximum Mesage Size" and "Maximum Attachment Size"
> configured as shown above, what should be the behavior among those two
> directives? Is "Maximum Message Size" which dictates the control of
> size of messages? Or are those rules ignored because of the unlimited
> value (-1) of "Maximum Attachment Size"? Or maybe "Maximum Attachment
> Size" is just ignored?
>
> 3. Rules of max.message.size.rules are evaluated like Firewall rules
> or Squid ACLs? I mean, i want to know if MailScanner matches a message
> with a rule (From: user1 at domain.com 1M) at line 3 then MS stop reading
> next lines? Does MS always read all lines and matches with the last
> rule found/matching?
>
> I'm asking this because I noted that MS isn't working properly:
>
> 1. user1 at domain.com sends a message to user7 at domain.com (not in rules
> file, so defaults to *@domain.com 2M) of 1.8 MB and MS doesn't block
> it, it just let it pass. Didn't work as expected.
> 2. user1 at domain.com sends a message to user7 at domain.com (not in rules
> file, so defaults to *@domain.com 2M) of 4.5 MB and MS doesn't block
> it, it just let it pass. Didn't work as expected.
> 3. user1 at domain.com sends a message to user7 at domain.com (not in rules
> file, so defaults to *@domain.com 2M) of 1.9 MB and MS does block it
> and send a warning message as expected.
>
> I just found a person on Internet with a similar problem with MS
> 4.79.11 and according to him the solution was to downgrade to MS 4.72.
> The link of this report (sorry, is in spanish) is:
>
>
> http://www.ecualug.org/2010/06/02/forums/problema_con_mailscanner_en_parametro_maxmessagesizerules
>
> Is any bug related to this settings in MS 4.79.11? I checked the
> Changelog of MS 4.81 (beta and stable) but didn't find anything
> related to this.
>
> I hope someone can help me because I don't really know what's the
> problem with my MS installation.
>
> Thanks
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100922/0041d776/attachment.html