efa-project.org

I have EFA in DMZ between the internet and my Exchange
1 Efa receive emails from internet and send to my Exchange
2 Efa receive emails from my Exchange and send to internet

I used this method to NON scan emails from Exchange to the internet do you think is good ?

vi /etc/MailScanner/MailScanner.conf
#Scan Messages = yes
Scan Messages = %rules-dir%/scan.messages.rules

Content of scan.messages.rules :
From: 10.1.1.125 no
FromOrTo: default yes

(Catching up on old posts after having been away for a while)

My thought is to leave the scanning of outgoing mail on. Why? If someone inside the organization has their computer infected with junk and that junk is being email out, I want to know about it.

If I could *absolutely* trust the internal users, and the internal virus/trojan/spam scanners then I might turn it off, but I never trust my internal users.