OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 2nd content filter?

From: Robin Lynn Frank (rlfrankparadigm-omega.com)
Date: Thu Dec 02 2004 - 15:14:20 CST

On Thu, 2004-12-02 at 12:13, Magnus Bäck wrote:
> On Thursday, December 02, 2004 at 19:28 CET,
> Robin Lynn Frank <rlfrankparadigm-omega.com> wrote:
>
> > We currently have clamsmtp/clamav running as an after queue content
> > filter. It listens on 127.0.0.1:10025 and re-injects on
> > 127.0.0.1:10026. All mail goes thru it and it works fine.
> >
> > There are a limited number of addresses we'd like to run thru
> > something like spampd, but then go to the clamsmtp. Is it possible,
> > for example to have the second content filter listen on
> > 127.0.0.1:10024 and re-inject on 127.0.0.1:10025 ? I assume I could
> > invoke the second content filter via an access map domain.dom FILTER
> > 127.0.0.1:10024 ?
>
> Of course it's possible (although the FILTER syntax isn't quite
> correct), but I'd use Postfix as a buffering mechanism in between the
> content filters. How does spampd react if the reinjection fails?
>
> Postfix -> spampd -> Postfix -> clamsmtp -> Postfix

I tried a different approach. clamsmtp listens on 10025 and re-injects
at 10026, being invoked by content_filter = in main.cf/ amavisd-new
listens on 10023 and re-injects on 10024. Both daemons invoke clamdscan
as user amavis so that part seems okay though I haven't fully tested
what happens when they both do so concurrently. amavis gets invokde
only by the FILTER action (with correct syntax).

I'd use amavis by itself, but it is designed to use spamassassin except
where whitelisted and I need spamassassin only for about 50 domains and
CCtlds so that whitelist would be huge.
--
 /"\ ASCII RIBBON Robin Lynn Frank
 \ / CAMPAIGN Director of Operations
  X AGAINST Paradigm-Omega, LLC
 / \ HTML MAIL http://www.paradigm-omega.com/
=====================================================================
Spambots visit http://paradigm-omega.net/cgi-bin/custmail.cgi
=====================================================================
I'd submit my resignation if I knew
where the headquarters of the human race was.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Sed quis custodiet ipsos custodes?

iD8DBQBBr4Woo0pgX8xyW4YRAv3wAKCXt5PCScPLcB/3dEg6pRMvlvIToQCgqToK
GAH/GzbBOI05io8PFwCD1ew=
=WGEO
-----END PGP SIGNATURE-----