OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: clamav

From: Tom Lee (tom_lee01hotmail.com)
Date: Mon Feb 06 2006 - 13:00:47 CST


>From: mouss <usebsdfree.fr>
>To: Tom Lee <tom_lee01hotmail.com>
>CC: postfix-userspostfix.org
>Subject: Re: clamav
>Date: Sat, 04 Feb 2006 15:49:07 +0100
>
>Tom Lee a écrit :
>
> >
> > However, I noticed that the following line has to be commented out
> > content_filter = scan:[127.0.0.1]:10025
> >
>
>yes. otherwise this would be applied to all traffic. if you don't want
>to filter outbound mail, then use Wietse recommendation (this is also
>documented in the FILTER README).
>
>but do it in main.cf, so that it applies to the before-filter smtpd (the
>one listening on port 25 for instance).
>

After the change, I noticed that the out-going email (using SASL
authentification) has no log file.
Is there something wrong in my configuration below?

[rootemail log]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_mail_to_commands = alias,forward,include
allow_mail_to_files = alias,forward,include
biff = no
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
delay_notice_recipient = xxxxxx.com
delay_warning_time = 4h
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = no
local_recipient_maps =
luser_relay = xxxxxxxr.com
mail_owner = postfix
mailbox_command = /usr/bin/procmail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
masquerade_domains = $mydomain
maximal_queue_lifetime = 1d
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = company.com
myhostname = email.company.com
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /home/wcheng/postfix_readme
receive_override_options = no_address_mappings
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_client_restrictions = hash:/etc/postfix/access
smtpd_delay_reject = yes
smtpd_recipient_restrictions = check_recipient_access
hash:/etc/postfix/recipien
t_access,permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_soft_error_limit = 20
unknown_local_recipient_reject_code = 550
[rootemail log]#

Thanks for your gateway filtering suggestion.

Tom