OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Will Yardley (postfixlifewithoutqmail.org)
Date: Thu Jan 03 2002 - 00:39:53 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Adrian Bolzan wrote:
    > On 3 Jan 2002 at 7:12, Ralf Hildebrandt wrote:
    > > On Thu, Jan 03, 2002 at 01:15:44PM +1000, Adrian Bolzan wrote:
    >
    > > > For in:
    > > > Internet --> Postfix (Header/body matching, on DMZ)
    > > > --> Postfix + Antivirus (on DMZ)
    > > > --> Groupware server (Internal)

    > > Why do you want to split the two Postfix machines?
     
    > With professional anti-virus software it seems they listen on Port 25
    > (the ones i have checked) and only seem to be able to send to one SMTP
    > server. I am not really sure what other arrangement you mean. I had
    > header/body content matching on the first server just as a way of
    > reducing what gets to the second postfix server, which will be doing
    > more intensive work, such as checking for viruses in attachments, etc.

    if you're using a recent enough postfix, you can use 'content_filter'.

    we use rav antivirus, but several virus scanners have inline content
    filter type virus scanners.

    i have:
    content_filter = smtp:127.0.0.1:10025

    in main.cf

    and:
    127.0.0.1:10026 inet n - n - 1000 smtpd
            -o content_filter= -o myhostname=ravscan.zugzug.hq.newdream.net

    in master.cf

    w
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users