Mailscanner allows for a very fine level of control over email content and security via its configuration and ruleset files. This article shall look at setting up per user or per domain rules for file types.
It is based on my experience with MailScanner on RPM based systems, however it should work on any system running a standard install of MailScanner.
Why would this be of interest?
If you are scanning mail for multiple domains and companies you may wish to impose restrictions on certain file types for particular users or, as is more often the case, these restrictions will be forced on you.
Getting Started
If the server is in production you may want to stop MailScanner processing mail while you make the changes to its configuration:
/etc/init.d/MailScanner stop;/etc/init.d/MailScanner starting
This will stop MailScanner and then restart its “in” queue, so mail will “sit” in the inbound queue.
Open MailScanner.conf in vi:
vim /etc/MailScanner/MailScanner.conf
Look for the line :
Filename Rules = %etc-dir%/filename.rules.conf
In order to make this a ruleset which you can control you should change this to something like:
Filename Rules = %etc-dir%/filename.rules
in /etc/MailScanner you need to create the actual ruleset file.
The way I did it was:
FromOrTo: default /etc/MailScanner/filename.rules.conf
FromOrTo: *@domain1.ie /etc/MailScanner/filename.rules.domain1.conf
FromOrTo: *@domain2.com /etc/MailScanner/filename.rules.domain2.conf

The first file:
/etc/MailScanner/filename.rules.conf
is the one that ships with MailScanner (with or without sidewide modifications).
The other file(s) contain domain/user specific directives.
For example, one of our clients asked us to block ALL zip files, so the custom ruleset contained one minor, but important, difference:
deny \.zip$ - -

If you have been “hacking” MailScanner for a while you will know that you can specify rules to apply to an entire domain:
*@domain.tld or a specific user: user@domain.tld
You could also do it using something like:
From user1@domain.tld and To user2@domain.tld
The README is helpful:
As you can see, each rule has 3 fields:
1. Direction (or "Virus:")
2. Pattern to match
3. Result value (or values)
or 6 fields:
1. Direction 1 (or "Virus:")
2. Pattern to match
3. The literal word "and"
4. Direction 2 (or "Virus:")
5. Pattern to match
6. Result value (or values)

Your mileage may vary

Related Posts:

• No Related Posts

Google launched its site targetting service for adwords 10 days ago, so how well is it working?
Is it having a tangible impact?
Web marketing has the distinct advantage over print media in that you can track a campaign’s effectiveness with a high degree of accuracy.
Banner displays > visitor clicks > visitor buys (or not)
Even before the advent of advanced web log analysers and Google’s own conversion tracking service it was possible to follow the trail.
The problem with the non-targetted ads was that you did not really know which sites were displaying your ads unless you came across them yourself, or to put it another way, you did not have full control over your inventory.
Although there is no doubt in my mind that adwords do work maintaining some level of control over where my ads appear is important.
So how does the targetting work out?
The overall answer is “very well”. I can decide exactly which sites I want our ads to appear on. No longer am I at the mercy of the site’s content (or Google’s interpretation of it). If I want an ad to appear on a news site I simply choose the site and place my bid. I then have some level of guarantee that my ads will appear.
So how about actual sales?
This is an area I find a little unclear. Of course I can see sales as we make them, but the actual conversion ratio is not as clear.
With the standard adwords campaigns you have quite a bit of detail in relation to coversions including, and this is the key, the actual cost per conversion.
With the targetted ads you get a conversion rate, but not an actual cost. The interesting thing is that the rate itself wasn’t displaying until a couple of days ago, so maybe this is an area that Google is still working on.
What are the tangible advantages?
Having control over where ads appear, as opposed to running a campaign based on the aspiration that the keywords/phrases would match with relevant content for your target market/audience.
Can it save you money?
I would think that it can.
A lot of websitest that sell advertising inventory set quite high CPM with rates in excess of €8 CPM being the norm, whereas with Google I’ve never seen anything above €3 CPM.
I guess only with time will we be able to accurately judge how effective a solution it really is, but one thing is for sure it will have an impact on how people’s online marketing spend is divied up in the future.
Why would you pay €10 CPM for a site, when you could get your ads on there for a fraction of the price via Google?
Why would you trust unaudited statistics when you can accurately track your stats via the Google interface?

Related Posts:

• No Related Posts

Every day I read marketing material from other companies. What never ceases to amaze me is the total lack of content in some of their blurbs. Regardless of what they are trying to sell you, whether it is a service or a tangible product they seem to think that “more is better”, ie. if you can say it 10 words then it will probably sound even better in 30 words or more. Shove in a few superlatives for good measure, regardless of whether they actually enrich the content or not. I touched on this “marketing madness” a few months ago.
This evening I was reading over a preview of a new site. It was a really frustrating experience for me as I was familiar with their services and would have no qualms about recommending them to people. However if the new site’s content had been the deciding factor in choosing them for our own business then we would never have bought anything from them.
The other thing that is causing me much amusement at present is some of the IT press releases. I know that we all need to issue press statements and that at times they may not be the most newsworthy, but some of the recent ones I’ve read have been real gems.
One company contradicts their own website in a press release – nothing like consistency, while others manage to spin the most insignificant of events to new levels. I suppose I should congratulate them on one level, but I can’t help laughing at the same time.
Ah well. It’s only business

Related Posts:

• No Related Posts

There has been a lot of commotion in technical circles in the past week following on Microsoft’s announcement that it was implementing Sender ID for hotmail.
Microsoft’s original plans for sender ID seemed to be quashed when the Open Source community, most notably the Apache Software Foundation, made it clear that they did not support Microsoft’s implementation.
The original MS version of sender ID seems to have fallen by the wayside to be replaced by SPF, which I mentioned a few months ago.
What is causing some confusion is Microsoft’s insistence on referring to it as “sender ID”, while all the documentation on their site points back to the SPF homepage.
Is there any difference?
It would seem not.
In the last week a number of our clients who hadn’t already published SPF for their domains did so and we are now publishing a basic set for our primary domain.
Should we applaud Microsoft? I think not. A more responsible attitude would have been to allow people a bit more time to prepare their DNS.
Having said that, SPF records are not particulary complicated, but it still requires some thought to set them up.
If you are only sending mail from one mailserver and never from any other and do not outsource any services to 3rd parties that may send email on your behalf, then an SPF record could be very simple.
Have a look at the one from aol.com:
aol.com. 300 IN TXT "v=spf1 ip4:152.163.225.0/24 ip4:205.188.139.0/24 ip4:205.188.144.0/24 ip4:205.188.156.0/23 ip4:205.188.159.0/24 ip4:64.12.136.0/23 ip4:64.12.138.0/24 ptr:mx.aol.com ?all"
aol.com. 300 IN TXT "spf2.0/pra ip4:152.163.225.0/24 ip4:205.188.139.0/24 ip4:205.188.144.0/24 ip4:205.188.156.0/23 ip4:205.188.159.0/24 ip4:64.12.136.0/23 ip4:64.12.138.0/24 ptr:mx.aol.com ?all"

It’s not overly complex, but if you compare it to mine for this domain:
mneylon.com. 900 IN TXT "v=spf1 a a:tristan.blacknight.ie -all"
you can see that they have had to take into account more complex factors.
Microsoft.com on the other hand, is being “clever”:
microsoft.com. 3600 IN TXT "v=spf1 mx redirect=_spf.microsoft.com"

they are actually sending you off to check against _spf.microsoft.com which has:
_spf.microsoft.com. 3600 IN TXT "v=spf1 ip4:213.199.128.139 ip4:213.199.128.145 ip4:207.46.50.72 ip4:207.46.50.82 ip4:131.107.3.116 ip4:131.107.3.117 ip4:131.107.3.100 ip4:131.107.3.108 a:delivery.pens.microsoft.com a:mh.microsoft.m0.net mx:microsoft.com ?all"

Even their SPF record might not be entirely comprehensive. Microsoft have been known to outsource some mailing lists to 3rd parties, so why aren’t they mentioned?
So what of Irish business?
Who is publishing SPF?
Newsweaver isn’t, Techcentral.ie seem to be oblivious to it, as are ENN and those are just a small selection of email sources that I receive mail from regularly.
DirectSki.com are publishing SPF, but they seem to be in the minority.
What’s even more amusing is that one of our competitors who fancy themselves as providers of antispam haven’t even bothered to do it.
Will this mean that they’ll all be rushing to rectify the situation over the next few weeks or will they remain in blissful ignorance?
I guess we’ll have to wait and see, but with SPF being adopted by some of the largest free email providers it is only a matter of time before the rest of the world is forced to follow suit.

Related Posts:

• No Related Posts

A couple of months ago the IEDR released a list of deleted domains.
So how is the “after market” faring? Are the domains being “snapped up” as quickly as their availability is made known?
It’s hard to say unless you check the list on a regular basis, however it does seem to be turning up some gems.
The list today, for example, included gems such as:

• dvdrental.ie
• babyshop.ie
• companyshop.ie
• flatfinder.ie
• Hairdressers.ie
• video.ie

If these domains have been left expire it shows just how little a good domain name really means if it isn’t backed by something more. Or does it?
What happens with these domains when they are registered again? Does Google sandbox them?
Should the IEDR be looking at offering these domains at a premium rate? Or should there be some kind of web service for resellers to inform their clients of “hot” deletions?
Idle speculation?
Maybe not entirely. The recent debate about personal domains here demonstrates that some people are interested in the subject

Related Posts:

• No Related Posts

So Google launched site targetting a few days ago.
I have both an adwords and an adsense account with Google, or more precisely, the company has one of each and I have an adsense account as well
From an advertiser’s perspective I would have thought that selecting a range of sites would have led to impressions clocking up, but I was obviously wrong.
With the standard adwords you are given an indication of where your ad will appear in relation to the amount you bid on the keyword or phrase, whereas with the CPM model you don’t seem to have that option. Some kind of “bid X to get Y impressions on somesite.tld” would be helpful. Maybe this kind of functionality is going to be added at a later stage.
The flipside to this is adsense.
How will earnings be affected by the new payment model?
If advertisers were previously paying for clicks does this mean that now publishers will be paid for impressions?
There doesn’t seem to be any mention of it in the adsense help docs. Am I missing something?

Related Posts:

• No Related Posts

Would people be interested in registering personal IE domains if there was a special subdomain for it eg. name.ie or ainm.ie (or some other semantically logical derivative) ?
We get requests for IE domains every single day. In most cases they are from either registered businesses or similar, but we are seeing an increasing demand for personal domains. Unfortunately the IEDR‘s naming policies do not allow you to register something like micheleneylon.ie unless your business or activity is known by that name. So, for example, a published author can register their name, as can a politician or other public figure, however a private citizen cannot.
This does lead to issues, as people look at other cctlds, such as co.uk and see that they can register whatever they want, whereas with .ie not only are they more restricted by the naming schema, and are reduced to registering mjn1.ie or similar if they don’t register a business name with the CRO
I can understand the IEDR’s current rules in most instances, however maybe it is time that they introduced a new “section”. Other countries have designated part of the namespace for specific areas, so .ac.uk is reserved for academic institutions and various other “areas” exist within other national registries. To date the Irish namespace has been flat. There is no differenciation between private businesses, government departments, education or personal space.
Would a change be of benefit or would it merely cause more problems that it solved?
The IEDR is not the organisation it used to be.
Earlier this year they reported profits, while they also made a move towards creating some form of “after market” in “secondhand” domains.
From a technical perspective there have been some significant changes, although most of them would not be visible to the end user but would be of great interest to companies such as ourselves that register domains on behalf of our clients.
Of course one of the obvious arguments against a move like this would be the current size of the cctld. I stress current, as a move like this could help to grow it significantly. However, for that to happen, these domains could not be priced at the existing level, which varies from €40 to over €100, depending on the reseller. If an individual could get their own domain for a price similar to that of a .com it would surely be attractive, however the IEDR may be able to argue against that pricing also.
On what grounds you may ask?
Well the IEDR is not like .com. It is not a fully automated system. Each and every registration and modification request has to be manually reviewed by the IEDR staff, who work from Monday to Friday. If you want to make a simple DNS change on a Friday evening, for example, you will have to wait until the following Monday morning before it can be enacted.
What can be done to address this situation?
The obvious answer would be to introduce a greater level of automation. If, for example, a system similar to Nominet’s automaton was put in place then requests could be processed almost automatically. Needless to say there would have to be some level of verification, but surely a DNS change does not require a hostmaster’s intervention? Surely the onus lies on the reseller or their client to know if they have setup their DNS correctly or not, as it will not be processed until it passes the DNS check in either case.

Related Posts:

• No Related Posts

A couple of months ago I mentioned sendmail milters. Snert are no longer offering all of them under an open source license unfortunately. In some ways I can understand why they are doing it. Even programmers have to eat – however it is still sad to see software licenses changing like that.
The milter we are using, milter-ahead, is still available as “Free Source”, but milter-sender is now commercial.

Related Posts:

• No Related Posts

This seems to be the week for tweaking my blog
Two new plugins I found whilst browsing have now been installed.
One of them is only viewable by the site admin (me) and changes the admin interface entirely. WP Tiger only works with CSS2 capable browsers and downgrades automatically for CSS challenged browsers such as IE 6.
The other one is for the actual RSS feeds. Feedburner can do all sorts of interesting things with a blog feed, so integrating it smoothly with wordpress was something I wanted to do. Fortunately there is a nice little plugin that does just that.
The only thing on my end that needed changing was my .htaccess Judging by the issues I had been having I think my .htaccess was in serious need of an update WordPress was able to regenerate it correctly within a couple of seconds, so now all my plugins work properly AND I’ve fixed the annoying issue with the older posts vanishing into the ether
Yay!

Related Posts:

• No Related Posts

Google has finally launched site targetting for adwords.
In order to enable the site targetting option you need to go into your account settings after logging in and toggle the option. You then have the option of choosing between normal ads and targetted ones when you create a campaign. Unlike with the normal ads you then have to specify a CPM rate.
So how do you choose sites?
You have two options. You can either specify specific sites that you know are in the network or use keywords and then choose from the sites available that Google considers to be relevant.

Related Posts:

• No Related Posts