OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Tzafrir Cohen (tzafrirtechnion.ac.il)
Date: Mon Jan 14 2002 - 12:19:25 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Mon, 14 Jan 2002, Jason Baker wrote:

    > On January 14, 2002 09:48 am, you wrote:
    > >
    > > One thing though: Where exactly is this filtering performed in postfix?
    >
    > The general method is to have postfix feed the messages to the virus scanner,
    > which then sends them back to postfix on a new port,and configure postfix to
    > listen to that port in such a way that it doesn't send the message to the
    > virus scanner.
    >
    > This is obliquely referenced in the Postfix FAQ at:
    > http://www.postfix.org/faq.html#scanning
    >
    > The example there only touches on getting the information to the scanner.
    > The Amavis documentation is a decent starting point, but in short:
    >
    > Added to master.cf:
    > vscan unix - n n - 10 pipe user=vscan
    > argv=/usr/sbin/amavis ${sender} ${recipient}
    > localhost:10025 inet n- n - - smtpd -o
    > content_filter=
    >
    > That defines the vscan transport, which the first postfix sends the mail to.
    > The second line creates the scanless transport for delivery.
    >
    > Added to main.cf:
    > content_filter = vscan:
    >
    > That tells postfix to send mail to vscan by default.
    >
    > Hope that helps.

    Note that this method has some overhead:

    * more complicated

    * any message is twice in the queue, and thus consumes more server
      resources.

    -- 
    Tzafrir Cohen                        /"\
    mailto:tzafrirtechnion.ac.il        \ /  ASCII Ribbon Campaign
    Taub 229, 972-4-829-3942,             X   Against  HTML  Mail
    http://www.technion.ac.il/~tzafrir   / \
    

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure, go to http://www.mandrakesecure.net/.