OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Restricted_access question

From: Figaro, Nicolas (nfigarocdcixis-cm.com)
Date: Fri Jul 02 2004 - 08:35:59 CDT


Hi,

I use postfix 2.0.19 on solaris 2.6.

Here is an extract from the master.cf :
smtp inet n - n - - smtpd -o
smtpd_recipient_restrictions=regexp:/usr/local/postfix/etc/restricted_ac
cess_regexp,permit_mynetworks,reject -o always_send_ehlo=yes -o
smtp_send_xforward_command=yes

Here is the content of the restricted_access_regexp file (3366 is an
antispam filtering port, 10999 is an antivirus filtering port). :
/^nfigaro/ FILTER smtp:localhost:3366
/.*/ FILTER smtp:localhost:10999

As I received a mail i'm not the only recipient, here is the log entry
(I addedd nospam_ and _nospam to the recipient's email domain) :
Jul 2 14:41:07 mserable postfix/smtpd[8958]: D75B272:
client=unknown[158.156.1.207]
Jul 2 14:41:07 mserable postfix/smtpd[8958]: D75B272: filter: RCPT from
unknown[158.156.1.207]: <nfigaronospam_cdcixis-cm.com_nospam>:
Recipient address triggers FILTER smtp:localhost:3366;
from=<karen1carrollhotmail.com>
to=<nfigaronospam_cdcixis-cm.com_nospam> proto=ESMTP
helo=<esmailfed2.serv.cdc.fr>
Jul 2 14:41:07 mserable postfix/smtpd[8958]: D75B272: filter: RCPT from
unknown[158.156.1.207]: <partusnospam_cdcixis-cm.com_nospam>: Recipient
address triggers FILTER smtp:localhost:10999;
from=<karen1carrollhotmail.com>
to=<partusnospam_cdcixis-cm.com_nospam> proto=ESMTP
helo=<esmailfed2.serv.cdc.fr>

So the message is sent to the antivirus port, because of the second
recipient that matches the .* rule in the restricted_access.

Is there a way I can have the mail filtered by my antispam port, even if
I'm not the only recipient ?
(without removing the wildcard if possible).

Thanks

Nicolas Figaro