How do you disable Mailscanner for outgoing but enable for incoming email?

[Valetia]

How do you disable Mailscanner for outgoing but enable for incoming email?

[chirpy]

You need to use a rules file. If you haven't already got one, modify MailScanner.conf so that

Spam Checks = %rules-dir%/spam.scanning.rules

Then create a file in the rules subdirectory called spam.scanning.rules and add the domains as follows:

To: *@mydomain.com yes
To: *@myotherdomain.com yes
FromOrTo: default no

The last one is a catchall to not scan domains that are not listed.

The key here is using To: instead of FromOrTo: to prevent outgoing email from being scanned for spam.

Stop and restart MailScanner after making any changes.

[Creazioni1]

From when installed MAILSCANNEr server ar a big problem
LOAD IS HIGH

All day i've 15 SSH open to control server's LOAD
is a bad life

When some1 send a newsletter, server go down
(before mailscanner no problems)

I would like delete outgoing control for all mail
i would like optimizze mailscanner

can i find HOW-TO in some site?

THANKS

[kris1351]

You have a server problem there. While Mailscanner can create a small additional load, it won't bring down your server unless you are overselling horribly bad. We run it on ours with no issues at all with extra load, each check only takes a second or two.

As for deleting it there is an uninstall script that came with the package you downloaded from layer1. You can re-download it if you didn't save it the first time.

[HostIt]

Originally posted by Creazioni1
From when installed MAILSCANNEr server ar a big problem
LOAD IS HIGH

I would recommend installing Anand's Exiscan+Clam+Exim Autoinstaller, as per this thread. It uninstalls MailScanner automatically and as such, reduces load. Full details at http://www.cpanelappz.com/

As kris1351 said however, you would seem to have more problems than just MailScanner?

[Creazioni1]

i've REDHAT 8 + stable
therefore i wait to install

Thanks

[Creazioni1]

are you sure i don't modify, for block control outgoing mail,

/etc/exim.conf
or
/etc/exim_outgoing.conf

?

[chirpy]

You want to block all outgoing email?

To do that, you need to firewall off outgoing SMTP traffic on port 25 which is what the feature in WHM does with iptables rules when you use: WHM > Tweak Security > SMTP Tweak > Enable

If you are just talking about outgoing MailScanning, then I've already outlined how to do it above.

[chrisbond]

I'd recommend you switch to exiscan now that its part of the main cpanel exim build. I went from a mailscanner server to this running clam and just the standard exim rpms (you can grab latest via /scripts/exim4) you just then to add about 8 lines to the exim config im WHM and you're done.

[Przemek]

Originally posted by chirpy
If you are just talking about outgoing MailScanning, then I've already outlined how to do it above.

Doesn't it only stop MailScanner from scanning the messages for spam? But how to disable antivirus scanning for specific messages?

[chirpy]

Virus checking is very similar:

You need to use a rules file. If you haven't already got one, modify MailScanner.conf so that

Virus Scanning = %rules-dir%/virus.scanning.rules

Then create a file in the rules subdirectory called virus.scanning.rules and add the domains as follows:

To: *@mydomain.com yes
To: *@myotherdomain.com yes
FromOrTo: default no

The last one is a catchall to not scan domains that are not listed.

You can use FromOrTo: to virus scan outgoing and incoming email for a domain.

Stop and restart MailScanner after making any changes.

[goodmove]

Originally posted by chirpy
Virus checking is very similar:

You need to use a rules file. If you haven't already got one, modify MailScanner.conf so that

Virus Scanning = %rules-dir%/virus.scanning.rules

Then create a file in the rules subdirectory called virus.scanning.rules and add the domains as follows:

To: *@mydomain.com yes
To: *@myotherdomain.com yes
FromOrTo: default no

Would that cover subdomain emails? Is it possible to specify it as: *@*.mydomain.com yes

[chirpy]

Yes, you can use that subdomain format too.

[goodmove]

Originally posted by chirpy
Yes, you can use that subdomain format too.

Will I need to use both formats for each domain or will the subdomain format do both jobs?

[chirpy]

You will need both because it is doing pattern matching and the subdomain match has an extra dot (.) in it compared to the top level domain.