<html><body bgcolor="#FFFFFF"><div>I agree with the earlier email saying use rules for the notifications.<br><br><div>Garrod Alwood</div><div>Open Source Consultant</div><div>9047384988</div><div><a href="mailto:Garrod.alwood@lorodoes.com">Garrod.alwood@lorodoes.com</a></div>Sent from my iPod</div><div><br>On Feb 26, 2010, at 3:56 PM, "Steven Andrews" <<a href="mailto:sandrews@andrewscompanies.com">sandrews@andrewscompanies.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>
<div class="Section1">
<p class="MsoNormal"><span style="color:#1F497D">Never said I was. They’re
blocked in filetype.rules. What I’m after is having the message continue to
score so that SA rules can intervene and take it up to the highspam action.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>
[mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Garrod
M. Alwood<br>
<b>Sent:</b> Friday, February 26, 2010 10:40 AM<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> RE: scan for spam after filetype violation<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:black">Mailscanner is smarter than that to know the difference. Also you
shouldn't be accepting .exe's anyway.</span><span style="font-size:12.0pt;
font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Garrod
M. Alwood</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Consultant</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:garrod.alwood@lorodoes.com"><a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a></a></span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">904.738.4988</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
</div>
<div id="divRpF332060">
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;
font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;
font-family:"Tahoma","sans-serif""> <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>
[mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steven Andrews
[sandrews@andrewscompanies.com]<br>
<b>Sent:</b> Friday, February 26, 2010 10:42 AM<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> RE: scan for spam after filetype violation</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Unfortunately, we need the
notifications because of the legit emails that come in (user names file with 14
periods, etc).</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>
[mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Garrod
M. Alwood<br>
<b>Sent:</b> Friday, February 26, 2010 9:48 AM<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> RE: scan for spam after filetype violation</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:black">turn off notifications.</span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Garrod
M. Alwood</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Consultant</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:garrod.alwood@lorodoes.com"><a href="mailto:garrod.alwood@lorodoes.com">garrod.alwood@lorodoes.com</a></a></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">904.738.4988</span><o:p></o:p></p>
</div>
</div>
<div id="divRpF636268">
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;
font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;
font-family:"Tahoma","sans-serif""> <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>
[mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steven Andrews
[sandrews@andrewscompanies.com]<br>
<b>Sent:</b> Friday, February 26, 2010 9:42 AM<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> scan for spam after filetype violation</span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">I’m getting a boatload of messages with a settings.exe or
zip in them and the attachment filetype rules are triggering just fine, but
we’re getting slammed with the resultant notifications.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">I thought I could make a simple spamassassin rule to catch
these, but it appears spam checks aren’t done if the file dumps out for the
violation, virus, etc.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Is there any way to pass these message on thru so my SA rule
traps them?<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Steven
R. Andrews</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">,
President</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Andrews
Companies Incorporated</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><i><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Small
Business Information Technology Consultants</span></i><span style="font-size:
12.0pt;font-family:"Times New Roman","serif""> <br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><a href="mailto:sandrews@andrewscompanies.com">sandrews@andrewscompanies.com</a></span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> <br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Phone:
317.536.1807</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">"If
your only tool is a hammer, every problem looks like a nail."</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>,
and is <br>
believed to be clean. </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>,
and is <br>
believed to be clean. </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/" target="_blank"><b>MailScanner</b></a>,
and is <br>
believed to be clean. <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/"><b>MailScanner</b></a>,
and is <br>
believed to be clean. <o:p></o:p></span></p>
</div>
<br>--
<br>This message has been scanned for viruses and
<br>dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br>believed to be clean.
</div></blockquote><blockquote type="cite"><div><ATT00001..txt></div></blockquote><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</body></html>