Don't scan stuff from localhost?
"Larry Rosenman" <[email protected]> Mon, 31 Jan 2005 12:51:44 -0600
| Newsgroups | gmane.mail.exim.exiscan.user |
|---|---|
| Message-ID | <[email protected]> |
Is there anyway to convieniently not scan stuff being injected by mailman
(via 127.0.0.1) for
Virii, when the initial mail into the system WAS scanned?
I have the following:
acl_check_content:
warn condition = ${if !def:h_Message-ID {1}}
authenticated = *
hosts = !+relay_from_hosts
log_message = add message-id (auth)
message = Message-ID: <E$message_id@$primary_hostname>
warn condition = ${if !def:h_Message-ID {1}}
hosts = +relay_from_hosts
log_message = add message-id
message = Message-ID: <E$message_id@$primary_hostname>
# deny message = invalid address in header
# log_message = BAD_HEADER: invalid address in header
# !verify = header_syntax
# First unpack MIME containers and reject serious errors.
deny message = This message contains a MIME error ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
# Reject typically wormish file extensions. There is almost no
# sense in sending such files by email.
deny message = This message contains an unwanted file extension
($found_extension)
log_message = MALWARE: unwanted extension ($found_extension)
demime = scr:vbs:bat:lnk:pif:exe:com
# Reject virus infested messages.
deny message = This message contains malware ($malware_name)
malware = *
# Reject messages containing "viagra" in all kinds of whitespace/case
combinations
# WARNING: this is an example !
#deny message = This message matches a blacklisted regular expression
($regex_match_string)
# regex = [Vv] *[Ii] *[Aa] *[Gg] *[Rr] *[Aa]
# Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide
settings
# (user "nobody"), no matter if over threshold or not.
#warn message = X-Spam-Score: $spam_score ($spam_bar)
# spam = nobody:true
#warn message = X-Spam-Report: $spam_report
# spam = nobody:true
# Add X-Spam-Flag if spam is over system-wide threshold
#warn message = X-Spam-Flag: YES
# spam = nobody
# Reject spam messages with score over 10, using an extra condition.
#deny message = This message scored $spam_score points. Congratulations!
# spam = nobody:true
# condition = ${if >{$spam_score_int}{100}{1}{0}}
# finally accept all the rest
accept
I'm wondering if there is a way to turn off the malware/uvscan check for the
mailman submitted stuff.
Thanks,
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: [email protected]
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749