MCP checks

Shawn Iverson iversons at rushville.k12.in.us
Mon Sep 19 20:55:54 UTC 2016


I'll runs some tests.  5.0.3-7, right?

On Mon, Sep 19, 2016 at 4:47 PM, Jerry Benton <jerry.benton at mailborder.com>
wrote:

> Similar settings on my lab server. Not working =/
>
> This sucks.
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Peter H. Lemieux <mailscanner at replies.cyways.com>
> Reply: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Date: September 19, 2016 at 4:38:16 PM
> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Subject:  Re: MCP checks
>
> > # this contains the usual list of addresses to check or not to check
> > MCP Checks = /etc/MailScanner/rules/mcp_checks.rules
> >
> > First Check = MCP
> >
> > MCP Required SpamAssassin Score = 5
> > MCP High SpamAssassin Score = 9
> > MCP Error Score = 1
> >
> > # we use "PHI" for "patient health information"
> > MCP Header = X-XXCHC-PHI-Monitor:
> > Non MCP Actions = deliver
> >
> > MCP Actions = store-nonmcp
> > High Scoring MCP Actions = store-mcp
> > Bounce MCP As Attachment = no
> >
> > MCP Modify Subject = no
> > MCP Subject Text =
> > High Scoring MCP Modify Subject = no
> > High Scoring MCP Subject Text = {PHI}
> >
> > Is Definitely MCP = no
> > Is Definitely Not MCP = no
> > Definite MCP Is High Scoring = no
> > Always Include MCP Report = yes
> > Detailed MCP Report = yes
> > Include Scores In MCP Report = yes
> >
> > In /etc/MailScanner/mcp I have rulesets like this one:
> >
> > File: /etc/MailScanner/mcp/20_Numbers_and_Codes.cf
> >
> > ### Patient Identification Codes
> >
> > header SUBJ_XXID1 Subject =~ /\b005[4-8]\d{4}\b/
> > describe SUBJ_XXID1 XXCHC Patient ID with 0054-8 in Subject Header
> > score SUBJ_XXID1 10
> >
> > header SUBJ_XXID2 Subject =~ /\b1005[89]\d+\b/
> > describe SUBJ_XXID2 XXCHC Patient ID with 10058-9 in Subject Header
> > score SUBJ_XXID2 10
> >
> > header SUBJ_XXID3 Subject =~ /\b1006[0123]\d+\b/
> > describe SUBJ_XXID3 XXCHC Patient ID with 10060-63 in Subject Header
> > score SUBJ_XXID3 10
> >
> > header SUBJ_XXID4 Subject =~ /\b00000\d{3}\b/
> > describe SUBJ_XXID4 Possible XXCHC Patient ID in Subject Header
> > score SUBJ_XXID4 5
> >
> > # They use some pretty generic patient IDs like 00001234.
> > header SUBJ_XXID5 Subject =~ /\b0000\d{4}\b/
> > describe SUBJ_XXID5 Possible XXCHC Patient ID in Subject Header
> > score SUBJ_XXID5 5
> >
> > header SUBJ_SSN1 Subject =~ /\b\d{3}-\d{2}-\d{4}\b/
> > describe SUBJ_SSN1 Likely Social Security Number in Subject Header
> > score SUBJ_SSN1 10
> >
> > [etc.]
> >
> > A score of ten results in the message being quarantined and a notice
> > sent to the administrator and the message sender. A score of five sends
> > notices but permits the message to be sent to its recipient.
> >
> > Hope this helps, Jerry!
> >
> > Peter
> >
> >
> >
> > On 09/19/2016 03:21 PM, Jerry Benton wrote:
> > > What do your settings look like?
> > >
> > >
> > > -
> > > Jerry Benton
> > > www.mailborder.com
> > > +1 - 844-436-6245
> > >
> > >
> > > -----Original Message-----
> > > From: Peter H. Lemieux
> > > Reply: MailScanner Discussion
> > > Date: September 19, 2016 at 3:18:27 PM
> > > To: MailScanner Discussion
> > > Subject: Re: MCP checks
> > >
> > >> I do, but I'm using 4.85,2. We use MCP at a health center to intercept
> > >> outbound messages that may contain "patient health information" as
> > >> defined by the US HIPAA laws. Works as advertised.
> > >>
> > >> I haven't tried version 5 yet so I can't help with that.
> > >>
> > >> Peter
> > >>
> > >>
> > >> On 09/19/2016 02:51 PM, Jerry Benton wrote:
> > >>> Anyone using MCP? I can’t seem to get it to fire on any rules, but
> the
> > >>> same rules will fire in regular spamassassin checks.
> > >>>
> > >>>
> > >>> -
> > >>> Jerry Benton
> > >>> www.mailborder.com
> > >>> +1 - 844-436-6245
> > >>>
> > >>>
> > >>
> > >>
> > >> --
> > >> MailScanner mailing list
> > >> mailscanner at lists.mailscanner.info
> > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >>
> > >>
> > >
> > >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>


-- 
Shawn Iverson
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160919/c70c88cd/attachment.html>


More information about the MailScanner mailing list