<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><head><title></title>
<META http-equiv=Content-Type content="text/html; charset=default">
<meta http-equiv="Content-Style-Type" content="text/css">
<style type="text/css"><!--
body {
margin: 5px 5px 5px 5px;
background-color: #ffffff;
}
/* ---------- Text Styles ---------- */
hr { color: #000000}
body, table /* Normal text */
{
font-size: 9pt;
font-family: 'Courier New';
font-style: normal;
font-weight: normal;
color: #000000;
text-decoration: none;
}
span.rvts1 /* Heading */
{
font-size: 10pt;
font-family: 'Arial';
font-weight: bold;
color: #0000ff;
}
span.rvts2 /* Subheading */
{
font-size: 10pt;
font-family: 'Arial';
font-weight: bold;
color: #000080;
}
span.rvts3 /* Keywords */
{
font-size: 10pt;
font-family: 'Arial';
font-style: italic;
color: #800000;
}
a.rvts4, span.rvts4 /* Jump 1 */
{
font-size: 10pt;
font-family: 'Arial';
color: #008000;
text-decoration: underline;
}
a.rvts5, span.rvts5 /* Jump 2 */
{
font-size: 10pt;
font-family: 'Arial';
color: #008000;
text-decoration: underline;
}
span.rvts6
{
font-weight: bold;
color: #800000;
}
span.rvts7
{
font-weight: bold;
color: #800080;
}
a.rvts8, span.rvts8
{
color: #0000ff;
text-decoration: underline;
}
span.rvts9
{
font-weight: bold;
color: #800080;
}
span.rvts10
{
font-weight: bold;
}
span.rvts11
{
font-weight: bold;
color: #800080;
text-decoration: underline;
}
span.rvts12
{
font-weight: bold;
}
span.rvts13
{
font-weight: bold;
text-decoration: underline;
}
span.rvts14
{
text-decoration: underline;
}
span.rvts15
{
}
/* ---------- Para Styles ---------- */
p,ul,ol /* Paragraph Style */
{
text-align: left;
text-indent: 0px;
padding: 0px 0px 0px 0px;
margin: 0px 0px 0px 0px;
}
.rvps1 /* Centered */
{
text-align: center;
}
--></style>
</head>
<body>
<p>i got it Steve,</p>
<p><br></p>
<p> my default setting was</p>
<p><br></p>
<p> Silent Viruses = HTML-IFRAME All-Viruses</p>
<p><br></p>
<p>which means, all emails containing any viruses sent to my network their respective senders would not get notify, exception made for HTML-IFRAME.</p>
<p>I also had <span class=rvts10>"Delivery Silent Viruses = no"</span> which cause the "vanishing" of those internal emails, password protected. This explains why neither Sender or recipient got any warning.</p>
<p><br></p>
<p>This option have precedence than "<span class=rvts7>Notify Senders of Viruses = yes"</span>. </p>
<p><br></p>
<p><br></p>
<p>thanks to you i solve the problem this way:</p>
<p><br></p>
<p><span class=rvts10>Silent Viruses = </span>HTML-IFRAME</p>
<p><span class=rvts10>Delivery Silent Viruses = </span><span class=rvts15>%rules-dir%/NotifyVirusRecipients.rules</span></p>
<p><span class=rvts12>Notify Senders of Viruses = </span><span class=rvts15>%rules-dir%/NotifyVirusSenders.rules</span></p>
<p><span class=rvts10><br></span></p>
<p><span class=rvts10><br></span></p>
<p><span class=rvts14>contents of NotifyVirusSenders.rules</span></p>
<p><span class=rvts10><br></span></p>
<p><span class=rvts12> From: 192.168.10. yes</span></p>
<p><span class=rvts12> FromOrTo: Default no</span></p>
<p><br></p>
<p><span class=rvts14>contents of NotifyVirusRecipients.rules</span></p>
<p><br></p>
<p><span class=rvts12> FromOrTo: 192.168.10. yes</span></p>
<p><span class=rvts12> FromOrTo: Default no</span></p>
<p><br></p>
<p>Viruses Senders : from internal network they get a notification, from external they wont.</p>
<p>Recipients: from internal network they will be warned of the attempt, from external they wont.</p>
<p><br></p>
<p>once again, thanks a lot for your help!</p>
<p><br></p>
<p>Best Regards,</p>
<p><br></p>
<p>Jorge Costinha</p>
<p><br></p>
<p><br></p>
<p><span class=rvts6>> Jorge,</span></p>
<p><br></p>
<p><span class=rvts6>> Jorge Costinha wrote:</span></p>
<p><span class=rvts7>>> greatings all,</span></p>
<p><br></p>
<p><br></p>
<p><br></p>
<p><span class=rvts7>>> here what i have tried, unsuccessful:</span></p>
<p><br></p>
<p><br></p>
<p><span class=rvts7>>> in Mailscanner.conf</span></p>
<p><span class=rvts7>>> Notify Senders of Viruses = %rules-dir%/NotifyVirusSenders.rules</span></p>
<p><br></p>
<p><span class=rvts7>>> contents of NotifyVirusSenders.rules</span></p>
<p><br></p>
<p><span class=rvts7>>> From: 192.168.10. yes</span></p>
<p><span class=rvts7>>> FromOrTo: Default no</span></p>
<p><br></p>
<p><span class=rvts7>>> ive tried change the ip to my domain, something like</span></p>
<p><br></p>
<p><span class=rvts7>>> From: *@mydomain.com <</span><a class=rvts8 href="mailto:*@mydomain.com">mailto:*@mydomain.com</a><span class=rvts9>> yes </span></p>
<p><br></p>
<p><span class=rvts7>>> didnt work. the purpose of this started when someone inside my network </span></p>
<p><span class=rvts7>>> sent an excel password-protected file. The email wasnt delivered and the </span></p>
<p><span class=rvts7>>> sender didnt get any notification. I figure that internal users should </span></p>
<p><span class=rvts7>>> be receive notifications. if anyone has a better idead, i would </span></p>
<p><span class=rvts7>>> appreciate. Anyway, i cant seem to identify the problem. </span></p>
<p><br></p>
<p><span class=rvts6>> Check your setting for 'Silent Viruses' and read up on what this option</span></p>
<p><span class=rvts6>> does, you'll probably need a ruleset on this which returns a blank value</span></p>
<p><span class=rvts6>> for 192.168.10.</span></p>
<p><br></p>
<p><span class=rvts6>> Cheers,</span></p>
<p><span class=rvts6>> Steve.</span></p>
<p><span class=rvts6>> -- </span></p>
<p><span class=rvts6>> MailScanner mailing list</span></p>
<p><a class=rvts8 href="mailto:mailscanner@lists.mailscanner.info">> mailscanner@lists.mailscanner.info</a></p>
<p><a class=rvts8 href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"><font color="red"><b>MailScanner has detected a possible fraud attempt from "lists.mailscanner.info" claiming to be</b></font> > http://lists.mailscanner.info/mailman/listinfo/mailscanner</a></p>
<p><br></p>
<p><span class=rvts6>> Before posting, read </span><a class=rvts8 href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a></p>
<p><br></p>
<p><span class=rvts6>> Support MailScanner development - buy the book off the website! </span></p>
<p><br></p>
<p><br></p>
</body><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by HCC Mailscanner software, and is
<br />believed to be clean.
</html>