Allow a trusted sender to send any type of file

Discussion:

J Gao

2013-08-29 20:35:44 UTC

Hi,

We have a trusted developer send us binary files from time to time.
MailScanner always blocked these file so as administrator I have to
retrieve those files manually.

How can I allow the email with any type of attachment from this
developer to deliver to the recipient?

Thanks.

Gao

--
__
_|==|_
('')__/

--(`^^')

(`^'^'`)
`======'

Alex Neuman

2013-08-29 22:34:08 UTC

Permalink

Post by J Gao
Hi,
We have a trusted developer send us binary files from time to time.
MailScanner always blocked these file so as administrator I have to
retrieve those files manually.
How can I allow the email with any type of attachment from this
developer to deliver to the recipient?
Thanks.
Gao

You can try "scan messages" using a ruleset that says "no" for e-mails
from that user.
--
Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital

Robert Lopez

2013-08-30 18:23:11 UTC

Permalink

--(`^^')

(`^'^'`)
`======'
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

As Alex stated.

Another way is put them in a file.

For example...

Make certain you have a "rules" directory in your MailScanner
directory, probably already have it.

In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules

You may already have the file in your rules dir (version depending).
If not create it and put something like this into it to help you get
started:

# The purpose of this file is to establish a rule set
# to be used to tell MailScanner if an email should be
# scanned or not.
#
# The question is:
# "Should an email having this pattern be scanned?"
#
# An answer of yes causes it to be scanned.
# An answer of no causes it to by pass all scanning.
#
# The line format is "ruleset pattern answer"
#
# A sample ruleset would look like this:
# From: ignore.domain.com no
# From: trusted.email.address no
# FromOrTo: default yes

From: yourtrustedemailaddress.their.domain no

--
Robert Lopez

J Gao

2013-09-03 20:26:09 UTC

Permalink

Post by Robert Lopez

--(`^^')

As Alex stated.
Another way is put them in a file.
For example...
Make certain you have a "rules" directory in your MailScanner
directory, probably already have it.
In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
You may already have the file in your rules dir (version depending).
If not create it and put something like this into it to help you get
# The purpose of this file is to establish a rule set
# to be used to tell MailScanner if an email should be
# scanned or not.
#
# "Should an email having this pattern be scanned?"
#
# An answer of yes causes it to be scanned.
# An answer of no causes it to by pass all scanning.
#
# The line format is "ruleset pattern answer"
#
# From: ignore.domain.com no
# From: trusted.email.address no
# FromOrTo: default yes
From: yourtrustedemailaddress.their.domain no

I enabled "Scan Messages = %rules-dir%/scan.messages.rules", then
created the rule file with a test account. After retsart MailScanner, I
send an email from that test account with an executable file. The
MailScanner blocked it again:

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "bzip2"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Tue Sep 3 13:17:34 2013 the virus scanner said:
MailScanner: No programs allowed (bzip2)

Note to Help Desk: Look on the veecall (mail.veecall.com) MailScanner in
/var/spool/MailScanner/quarantine/20130903 (message 319DC80E4.A4282).

--
__
_|==|_
('')__/

Post by Robert Lopez
--(`^^')

(`^'^'`)
`======'

J Gao

2013-09-03 21:01:47 UTC

Permalink

Post by Robert Lopez

--(`^^')

As Alex stated.
Another way is put them in a file.
For example...
Make certain you have a "rules" directory in your MailScanner
directory, probably already have it.
In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
You may already have the file in your rules dir (version depending).
If not create it and put something like this into it to help you get
# The purpose of this file is to establish a rule set
# to be used to tell MailScanner if an email should be
# scanned or not.
#
# "Should an email having this pattern be scanned?"
#
# An answer of yes causes it to be scanned.
# An answer of no causes it to by pass all scanning.
#
# The line format is "ruleset pattern answer"
#
# From: ignore.domain.com no
# From: trusted.email.address no
# FromOrTo: default yes
From: yourtrustedemailaddress.their.domain no

Thanks. It works great!

Gao

--
__
_|==|_
('')__/

Post by Robert Lopez
--(`^^')

(`^'^'`)
`======'

Glenn Steen

2013-09-17 14:14:47 UTC

Permalink

It's an OK approach... apart from the security issue of using something
easily spoofable to bypass scanning altogether. If/when I need stuff like
this, I always use their IP adress (much harder to spoof;-).

Cheers
--
-- Glenn

Post by Robert Lopez

--(`^^')

As Alex stated.
Another way is put them in a file.
For example...
Make certain you have a "rules" directory in your MailScanner
directory, probably already have it.
In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
You may already have the file in your rules dir (version depending).
If not create it and put something like this into it to help you get
# The purpose of this file is to establish a rule set
# to be used to tell MailScanner if an email should be
# scanned or not.
#
# "Should an email having this pattern be scanned?"
#
# An answer of yes causes it to be scanned.
# An answer of no causes it to by pass all scanning.
#
# The line format is "ruleset pattern answer"
#
# From: ignore.domain.com no
# From: trusted.email.address no
# FromOrTo: default yes
From: yourtrustedemailaddress.their.domain no
--
Robert Lopez
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130917/30e856de/attachment.html