[Mimedefang] [Fwd: Internal mails are blocked-PROBLEM]

[Vivek Kumar]

ITs true that I have another Virus Scanner (Vexira). I was working on
chaing the flow but it will take some time and I wanted to fix the
current issue as its becoming more annoying.
I think that as all the mails are coming to my server either from
internet (outside) or from exchangeserver its always a incoming mail for
my server for him it doesn't matter where its coming from and where its
going. My AV scnner is listening on port 825 (smtp backdoor) so he is
getting all mail irrespective of its destination or origin.
Correct me if I am wrong.

Thanks

Vivek


On Tue, 2004-07-27 at 16:10, Matthew.van.Eerde at hbinc.com wrote:
> > From: Vivek Kumar [mailto:vivekk at gorave.net]
> > Hi,
> > 
> > I forgot to mention in my previous mail that I have added 
> > following code
> > in mimedefang-filter:
> > 
> > sub filter_relay($$$){
> >   my ($hostip,$hostname,$helo) = @_;
> >   my $internal_net1 = "191.0.0";
> >   my $internal_net2 = "191.0.1";
> >   $hostip=~  /^(\d+\.\d+\.\d+)./ ;
> >   my $mailip = $1;
> >   if($mailip eq $internal_net1 || $mailip eq $internal_net2) {
> >                 return("ACCEPT_AND_NO_MORE_FILTERING","It's from us it gotta be good");
> >                 }
> >   return("CONTINUE","");
> >   }
> > 
> > Thanks
> > 
> > Vivek
> 
> If I recall correctly we determined that you have another mail scanner running on the same machine - and that sendmail gets all of its email from that machine.  $hostip is thus eq "127.0.0.1" for all email, both inbound and outbound:
> 
> Internet -> (Vexira -> sendmail) -> Exchange
> Exchange -> (Vexira -> sendmail) -> Internet
> 
> You have two options:
> 1) Change the mail flow
> 2) Scan the HEADERS for a clue as to whether the mail originated from the internet, or from your exchange server.
> 
> Matthew.van.Eerde at hbinc.com                      805.964.4554 x902
> Hispanic Business Inc./HireDiversity.com         Software Engineer
> perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg," 
> 
> _______________________________________________
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang