OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Craig Sanders (castaz.net.au)
Date: Thu May 02 2002 - 23:20:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, May 03, 2002 at 02:01:45PM +1000, Matthew Hawkins wrote:
    > On Mon, 29 Apr 2002, Mick Hayes wrote:
    > > Are you saying that users can be exempted from body / header checks,
    > > if yes how ? I would love to be able to simplify my setup.
    >
    > You'll need to run the latest snapshot, it lets you configure multiple
    > instances of the various postfix daemons, and obviously with that you
    > can specify different config options for each instance.
    >
    > I would then use something like a transport map to pick up the people
    > that want to be exempted, and feed them via the route that does not do
    > header/body checks in cleanup(8). But please check the doco, that's
    > just off the top of my head and (since I haven't got that snapshot yet
    > and tried it out) could be wrong.

    i have no idea if that would work or not but it sounds like it would
    defeat one of the two advantages(*) that body_checks and header_checks
    have over filtering in the delivery agent - i.e. that messages can be
    rejected in the SMTP session and thus avoid having to queue bounces
    (most of which will be undeliverable).

    in short, you may as well use procmail to do this kind of filtering. or
    maildrop. or mailagent. or similar programs. that's what i used to do
    before body/header checks appeared in postfix.
     
    (*) the second advantage is that body/header checks are applied to all
    mail passing through the system, not just to locally delivered mail.

    if you really want the features of body/header checks with the ability
    to disable them on a per-recipient basis then your only option at the
    moment is to write a content-filter script which emulates the
    functionality of both header and body checks. your script could first
    check whether the recipient address/domain is listed in a
    'spamlovers.db' map file. i'd also recommend passing the message
    through spamassassin and also decoding any encoded attachments (base64,
    uuencoded, etc)...testing them against your body_checks patterns.

    this is uncharted territory. AFAIK, nobody has written anything like it
    yet. it's on my list of things to do when i get time...but it's been
    there for at least 6 months and i haven't even found time to start on it
    yet.

    craig

    -- 
    craig sanders <castaz.net.au>
    

    Fabricati Diem, PVNC. -- motto of the Ankh-Morpork City Watch - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users