MCP checks

Shawn Iverson iversons at rushville.k12.in.us
Mon Sep 19 22:06:25 UTC 2016


I do not see MCP being called.  I should at least see the following in the
maillog:

MCP Checks: Starting

On Mon, Sep 19, 2016 at 5:53 PM, Shawn Iverson <iversons at rushville.k12.in.us
> wrote:

> Confirmed issue with MCP.
>
> I cannot get MCP to fire either.
>
> On Mon, Sep 19, 2016 at 4:56 PM, Jerry Benton <jerry.benton at mailborder.com
> > wrote:
>
>> Yes. The latest.
>>
>>
>> -
>> Jerry Benton
>> www.mailborder.com
>> +1 - 844-436-6245
>>
>>
>> -----Original Message-----
>> From: Shawn Iverson <iversons at rushville.k12.in.us>
>> Reply: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>> Date: September 19, 2016 at 4:56:27 PM
>> To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>> Subject:  Re: MCP checks
>>
>> > I'll runs some tests. 5.0.3-7, right?
>> >
>> > On Mon, Sep 19, 2016 at 4:47 PM, Jerry Benton
>> > wrote:
>> >
>> > > Similar settings on my lab server. Not working =/
>> > >
>> > > This sucks.
>> > >
>> > >
>> > > -
>> > > Jerry Benton
>> > > www.mailborder.com
>> > > +1 - 844-436-6245
>> > >
>> > >
>> > > -----Original Message-----
>> > > From: Peter H. Lemieux
>> > > Reply: MailScanner Discussion
>> > > Date: September 19, 2016 at 4:38:16 PM
>> > > To: MailScanner Discussion
>> > > Subject: Re: MCP checks
>> > >
>> > > > # this contains the usual list of addresses to check or not to check
>> > > > MCP Checks = /etc/MailScanner/rules/mcp_checks.rules
>> > > >
>> > > > First Check = MCP
>> > > >
>> > > > MCP Required SpamAssassin Score = 5
>> > > > MCP High SpamAssassin Score = 9
>> > > > MCP Error Score = 1
>> > > >
>> > > > # we use "PHI" for "patient health information"
>> > > > MCP Header = X-XXCHC-PHI-Monitor:
>> > > > Non MCP Actions = deliver
>> > > >
>> > > > MCP Actions = store-nonmcp
>> > > > High Scoring MCP Actions = store-mcp
>> > > > Bounce MCP As Attachment = no
>> > > >
>> > > > MCP Modify Subject = no
>> > > > MCP Subject Text =
>> > > > High Scoring MCP Modify Subject = no
>> > > > High Scoring MCP Subject Text = {PHI}
>> > > >
>> > > > Is Definitely MCP = no
>> > > > Is Definitely Not MCP = no
>> > > > Definite MCP Is High Scoring = no
>> > > > Always Include MCP Report = yes
>> > > > Detailed MCP Report = yes
>> > > > Include Scores In MCP Report = yes
>> > > >
>> > > > In /etc/MailScanner/mcp I have rulesets like this one:
>> > > >
>> > > > File: /etc/MailScanner/mcp/20_Numbers_and_Codes.cf
>> > > >
>> > > > ### Patient Identification Codes
>> > > >
>> > > > header SUBJ_XXID1 Subject =~ /\b005[4-8]\d{4}\b/
>> > > > describe SUBJ_XXID1 XXCHC Patient ID with 0054-8 in Subject Header
>> > > > score SUBJ_XXID1 10
>> > > >
>> > > > header SUBJ_XXID2 Subject =~ /\b1005[89]\d+\b/
>> > > > describe SUBJ_XXID2 XXCHC Patient ID with 10058-9 in Subject Header
>> > > > score SUBJ_XXID2 10
>> > > >
>> > > > header SUBJ_XXID3 Subject =~ /\b1006[0123]\d+\b/
>> > > > describe SUBJ_XXID3 XXCHC Patient ID with 10060-63 in Subject Header
>> > > > score SUBJ_XXID3 10
>> > > >
>> > > > header SUBJ_XXID4 Subject =~ /\b00000\d{3}\b/
>> > > > describe SUBJ_XXID4 Possible XXCHC Patient ID in Subject Header
>> > > > score SUBJ_XXID4 5
>> > > >
>> > > > # They use some pretty generic patient IDs like 00001234.
>> > > > header SUBJ_XXID5 Subject =~ /\b0000\d{4}\b/
>> > > > describe SUBJ_XXID5 Possible XXCHC Patient ID in Subject Header
>> > > > score SUBJ_XXID5 5
>> > > >
>> > > > header SUBJ_SSN1 Subject =~ /\b\d{3}-\d{2}-\d{4}\b/
>> > > > describe SUBJ_SSN1 Likely Social Security Number in Subject Header
>> > > > score SUBJ_SSN1 10
>> > > >
>> > > > [etc.]
>> > > >
>> > > > A score of ten results in the message being quarantined and a notice
>> > > > sent to the administrator and the message sender. A score of five
>> sends
>> > > > notices but permits the message to be sent to its recipient.
>> > > >
>> > > > Hope this helps, Jerry!
>> > > >
>> > > > Peter
>> > > >
>> > > >
>> > > >
>> > > > On 09/19/2016 03:21 PM, Jerry Benton wrote:
>> > > > > What do your settings look like?
>> > > > >
>> > > > >
>> > > > > -
>> > > > > Jerry Benton
>> > > > > www.mailborder.com
>> > > > > +1 - 844-436-6245
>> > > > >
>> > > > >
>> > > > > -----Original Message-----
>> > > > > From: Peter H. Lemieux
>> > > > > Reply: MailScanner Discussion
>> > > > > Date: September 19, 2016 at 3:18:27 PM
>> > > > > To: MailScanner Discussion
>> > > > > Subject: Re: MCP checks
>> > > > >
>> > > > >> I do, but I'm using 4.85,2. We use MCP at a health center to
>> intercept
>> > > > >> outbound messages that may contain "patient health information"
>> as
>> > > > >> defined by the US HIPAA laws. Works as advertised.
>> > > > >>
>> > > > >> I haven't tried version 5 yet so I can't help with that.
>> > > > >>
>> > > > >> Peter
>> > > > >>
>> > > > >>
>> > > > >> On 09/19/2016 02:51 PM, Jerry Benton wrote:
>> > > > >>> Anyone using MCP? I can’t seem to get it to fire on any rules,
>> but
>> > > the
>> > > > >>> same rules will fire in regular spamassassin checks.
>> > > > >>>
>> > > > >>>
>> > > > >>> -
>> > > > >>> Jerry Benton
>> > > > >>> www.mailborder.com
>> > > > >>> +1 - 844-436-6245
>> > > > >>>
>> > > > >>>
>> > > > >>
>> > > > >>
>> > > > >> --
>> > > > >> MailScanner mailing list
>> > > > >> mailscanner at lists.mailscanner.info
>> > > > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> > > > >>
>> > > > >>
>> > > > >
>> > > > >
>> > > >
>> > > >
>> > > > --
>> > > > MailScanner mailing list
>> > > > mailscanner at lists.mailscanner.info
>> > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> > > >
>> > > >
>> > >
>> > >
>> > > --
>> > > MailScanner mailing list
>> > > mailscanner at lists.mailscanner.info
>> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> > >
>> > >
>> >
>> >
>> > --
>> > Shawn Iverson
>> > Director of Technology
>> > Rush County Schools
>> > 765-932-3901 x271
>> > iversons at rushville.k12.in.us
>> >
>> >
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> >
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
>
> --
> Shawn Iverson
> Director of Technology
> Rush County Schools
> 765-932-3901 x271
> iversons at rushville.k12.in.us
>
>
>


-- 
Shawn Iverson
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160919/a2923db6/attachment-0001.html>


More information about the MailScanner mailing list