OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 

From: Craig Sanders (castaz.net.au)
Date: Sat Mar 01 2003 - 17:43:38 CST


On Sat, Mar 01, 2003 at 09:15:25AM -0500, Wietse Venema wrote:
> > e.g. say i have a content filter running as user "filter", and that
> > content filter runs spamassassin 2.50 (which has bayesian stuff built
> > in) - do i have to worry about ~filter/.spamassassin/bayes_toks
> > exceeding mailbox_size_limit?
>
> File size limits are inherited from parent process to child process.
> What is the parent process of your content filter?

master.

i have the following in master.cf

smtp inet n - n - - smtpd -o content_filter=bogofilter:

bogofilter unix - n n - - pipe
  user=filter argv=/home/filter/bf.sh ${sender} ${recipient}

bf.sh pipes the mail through bogofilter and spamassassin and then
injects it back into postfix with sendmail. SA has recently been
upgraded to 2.50, which has a bayesian scanner built-in now, so i'll
probably take bogofilter out of the pipeline in a week or two when SA
has learnt enough...for now, it's helping to train SA.

> Aside from that, it seems to be a good idea to have resource limits on
> content filtering processes, so that one weird message can't hose your
> entire email infrastructure.

true. but that's not what i'm worried about. i'm worried about SA's
bayesian filter database exceeding mailbox_size_limit, and causing mail
to bounce.

craig

--
craig sanders <castaz.net.au>

Fabricati Diem, PVNC.
 -- motto of the Ankh-Morpork City Watch