OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Anton J Aylward, CISSP (ajasi.on.ca)
Date: Mon Jan 14 2002 - 14:46:56 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Indeed it is. Indeed it does.
    I use 'procmail-sanitizer', which, since I use procmail
    anyway to filter out known spam and do a presort of
    various mailing lists, I don't consider an overhead.

    Of course if your machine is a gateway or a server
    for many domains, this might not apply. But I would
    have thought that in that case Postfix would have been
    able to have a filter in between the input and output
    queues without having to actually go though the whole
    process twice. More like the way Smail3 used to do
    things .... The sanitizer documentation describes
    how to splice it in to sendmail (UGH!)

    If you think about it, for a relay, just about any
    filter will be possible if you are willing to use the
    'two machine' approach.

    http://www.impsec.org/email-tools/procmail-security.html

    Anton J Aylward

    > -----Original Message-----
    > From: Tzafrir Cohen [mailto:tzafrirtechnion.ac.il]
    > Sent: Monday, January 14, 2002 1:19 PM

    > > That tells postfix to send mail to vscan by default.
    > >
    > > Hope that helps.
    >
    > Note that this method has some overhead:
    >
    > * more complicated
    >
    > * any message is twice in the queue, and thus consumes more server
    > resources.

    For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
    message to discuss-unsubscribemandrakesecure.net. To visit MandrakeSecure,
    go to http://www.mandrakesecure.net/.