OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Liviu Daia (Liviu.Daiaimar.ro)
Date: Fri May 03 2002 - 04:24:36 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 3 May 2002, Ralf Hildebrandt <Ralf.Hildebrandtcharite.de> wrote:
    > On Fri, May 03, 2002 at 04:48:57PM +1000, Craig Sanders wrote:
    >
    > > > My suggestion was simply to use this feature of snapshot 20020331:
    > >
    > > and as i said, i pointed out that doing this would probably have
    > > undesirable consequences. if you accept a message and then test
    > > whether
    >
    > No. It's still in the SMTP dialogue, but during the DATA phase. If one
    > still rejects during that phase, the receiving machine need not (and
    > cannot!) create a bounce.

        I believe the approach suggested here goes something like this:

    (1) the default cleanup does no header or body checks --- otherwise
        the checks would be applied regardless of their recipients;

    (2) a recipient_canonical map rewrites the addresses of the "spam
        haters" to some dummy host:

            jdoeexample.com jdoedummy.example.com

    (3) a transport map routes messages addresses to the dummy host to a
        second smtpd listening on localhost:

            dummy.example.com smtp:localhost:10025

        (one might be able to merge (2) and (3) once per-user transport
        tables are available);

    (4) the second smtpd uses a cleanup with full header and body checks:

            localhost:10025 ... smtpd -o cleanup_service_name=cleanup2 ...
            cleanup2 ... cleanup -o body_checks=/some/file ...

    (5) the second cleanup would also rewrite the addresses of "spam haters"
        back to their original values.

        Rejection of a message because of header or body checks would happen
    in the second SMTP dialogue, and thus local Postfix would get the
    pleasure of sending a bounce.

        Regards,

        Liviu Daia

    -- 
    Dr. Liviu Daia               e-mail:   Liviu.Daiaimar.ro
    Institute of Mathematics     web page: http://www.imar.ro/~daia
    of the Romanian Academy      PGP key:  http://www.imar.ro/~daia/daia.asc
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users