[Question] Scan Messages configuration index

[Martin Hepworth]

That's correct if you want to scan outbound traffic

On Wed, 11 Jul 2018 at 22:30, Eoin Kim <Eoin.Kim at rcst.com.au> wrote:

> Hi Martin,
>
>
>
> Thanks for your response. So, if I understood correctly, I should include
> all IP addresses of my domain’s mail relays, correct? There is going to be
> a Microsoft Exchange server sitting behind it, hence, I guess I should
> register that as well.
>
>
>
> Eoin
>
>
>
> *From:* MailScanner <mailscanner-bounces+eoin.kim=
> rcst.com.au at lists.mailscanner.info> *On Behalf Of *Martin Hepworth
> *Sent:* Wednesday, 11 July 2018 5:48 PM
> *To:* MailScanner Discussion <mailscanner at lists.mailscanner.info>
> *Subject:* Re: [Question] Scan Messages configuration index
>
>
>
> Hi
>
> This is probably not the best way to whitelist your domain, as you leave
> yourself open to domain spoofing attacks on the email - ie spammers pretend
> to come from mydomain.com
>
> Best to whitelist by ipaddress
>
> And yes this setting is a big on/off for all scanning not just
> spam/viruses etc
>
>
>
>
>
>
>
> On Tue, 10 Jul 2018 at 22:56, Eoin Kim <Eoin.Kim at rcst.com.au> wrote:
>
> Hi all,
>
>
>
> I’d like to ask questions regarding MailScanner configuration indexs -
> Scan Messages. Shortly, what I want to achieve is:
>
>    1. Don’t scan messages from my domain.
>    2. Scan messages from other domains.
>
>
>
> So, I set the index like this:
>
> Scan Messages = %rules-dir%/scan.messages.rules
>
>
>
> And the rule file is like this:
>
>                 From:    *@mydomain   no
>
>                 FromOrTo:          default yes
>
>
>
> My first question is, is my rule file going to do the job I want? If so,
> I’d like to ask the second question. There are a lot of configuration
> indexes. If message scan is skipped for the messages from my domain, are
> all those indexes going to be disabled automatically for my domain’s
> messages?
>
>
>
> For example, if I just set like this - Allow IFrame Tags = disarm, does it
> mean that this is not applied to messages from my domain but is applied to
> other messages? Or should I still configure it to use a rule file? Sorry
> for the English, I hope I clearly explained. Thanks a lot.
>
>
>
> *Eoin Kim*
>
> Systems Administrator
>
>
>
> *RCS Telecommunications *
>
> Level 1 – The Annexe, 133 Mary Street
>
> Brisbane, QLD, 4000, Australia
>
> Office: 07 3228 0843
>
> Mobile: 0419 726 231
>
> Email: eoin.kim at rcst.com.au
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
>
> --
> Martin Hepworth, CISSP
> Oxford, UK
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> --
-- 
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180712/f3245968/attachment.html>