OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Matthew Hawkins (matthewtopic.com.au)
Date: Fri May 03 2002 - 00:41:49 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, 03 May 2002, Craig Sanders wrote:

    > On Fri, May 03, 2002 at 02:53:47PM +1000, Matthew Hawkins wrote:
    > > header and body checks are done by cleanup, not smtpd, so the advantage
    > > is already defeated [*].
    >
    > why say things you know are untrue?

    Quoting cleanup(8)

    CONFIGURATION PARAMETERS
           The following main.cf parameters are especially relevant
           to this program. See the Postfix main.cf file for syntax
           details and for default values. Use the postfix reload
           command after a configuration change.

    Content filtering
           body_checks
                  Lookup tables with content filters for message body
                  lines. These filters see physical lines one at a
                  time, in chunks of at most line_length_limit bytes.

           header_checks
                  Lookup tables with content filters for message
                  header lines. These filters see logical headers
                  one at a time, including headers that span multiple
                  lines.

    Quoting Wietse Venema, Message-Id: <20020402200255.A4D09BC06Fspike.porcupine.org>
    on Date: Tue, 2 Apr 2002 15:02:55 -0500 (EST)

    "The cleanup server is used by a lot of Postfix components: the
    local delivery agent (when forwarding mail), the bounce/defer daemon
    (when sending a non-delivery notification via email), and in the
    smtp/smtpd/lmtp processes (when sending postmaster notifications).
    And there may be more.
                                                                                                                  
    However, what is artificial is that header/body checks are done in
    the cleanup server instead of smtpd. That was a combination of
    convenience (header recognizing code was already in place) and
    consistency (it also examines mail that arrives via a non-SMTP
    channel such as /usr/sbin/sendmail, QMQP, or otherwise)."

    http://www.postfix.org/big-picture.html

    (Just to name 3 references to back up my claims that header/body checks
    are done by cleanup, and that cleanup is called by smtpd)

    > you misinterpret me. i never said that was a good or desirable thing.
    > i was pointing out that it was a step backwards.

    Sorry, I took the "you may as well.." along with the fact you'd done it
    previously yourself, as an advocation and so named a very real instance
    where it doesn't apply.

    > your suggestion was to receive the mail without body/header checks then,
    > depending upon recipient address, re-inject it back into postfix with
    > header/body checks enabled.

    My suggestion was simply to use this feature of snapshot 20020331:

            Choice between multiple instances of internal services: bounce,
            cleanup, defer, error, flush, pickup, queue, rewrite, showq. This
            allows you to use different cleanup server settings for different
            SMTP server instances. For example, specify in the master.cf file:
                                                                                                                  
                localhost:10025 ... smtpd -o cleanup_service_name=cleanup2 ...
                cleanup2 ... cleanup -o header_checks= body_checks= ...

    to achieve optional application of header/body checks without having to
    resort to any external filters. It's the only way I know of that you
    can have header_checks and/or body_checks be applied selectively from
    the one Postfix instance.

    Granted, its new and relatively unexplored territory.

    -- 
    Matt
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users