OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Body checks on incoming only

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Wed Aug 02 2006 - 15:41:05 CDT


At 03:00 PM 8/2/2006, Alex Palenschat wrote:
>I am trying to do this same thing and bypass the content
>filter as well.
>But the difference with my situation is that my postfix is
>configured as
>an email firewall/gateway. I have two interfaces, one with
>a public IP
>and one an internal IP. If I use inet_interfaces to only
>have postfix
>listen on the public IP then it can't forward mail to the
>internal MDAs.
>
>
>I have tried reading the docs on inet_interfaces and
>receive_override_options but don't seem to be getting it.
>If I specify:
>
>/etc/postfix/main.cf
>inet_interfaces = all
>
>and in master.cf
>
><Public IP>:smtp inet n - n - - smtpd
>
>And
>
><Internal IP>:smtp inet n - n - - smtpd
> -o content_filter=
> -o receive_override_options=no_header_body_checks
>
>Will I accomplish having all external email filtered but
>all outbound
>(mail from users) not filtered? Or will this confuse
>postfix and I need
>to run two separate instances?
>
>alex

The above sample config looks correct, and should do what
you want. Postfix supports multiple smtpd listeners with
different settings; that's a fairly common setup. You only
need multiple postfix instances if a) you need different
transport maps, b) the gyrations in master.cf become so
obtuse that the administrator cannot follow it, c) you want
to separate the logging.

--
Noel Jones