OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: How to disable outbound virus scanning (amavisd-new, spamassassin)

From: Anthony J. Biacco (thelittleprinceasteroid-b612.org)
Date: Mon Jan 15 2007 - 14:32:10 CST


You'd think it'd be relatively easy, but guess it's not.

How about something like this in master.cf

x.x.x.x:25 inet n - n - - smtpd
     -o content_filter=
     -o smtpd_client_restrictions=permit_mynetworks,reject

Where x.x.x.x is an internal ip. Then when you're sending out your
campaigns, use the SMTP server x.x.x.x instead of Postfix's normal IP.

-Tony
----------------------------------------
Anthony J. Biacco
Senior Systems and Network Administrator
Ncohafmuta Enterprises
303-981-4955

> -----Original Message-----
> From: Jim Rice [mailto:jimbydesignpublishing.com]
> Sent: Monday, January 15, 2007 12:49 PM
> To: Anthony J. Biacco
> Cc: postfix-userspostfix.org
> Subject: RE: How to disable outbound virus scanning (amavisd-new,
> spamassassin)
>
> On Mon, 2007-01-15 at 12:25 -0700, Anthony J. Biacco wrote:
> > Jim,
> >
> > In your amavisd.conf, you can always set the virus_lovers variable,
> for
> > instance, read_hash(\%virus_lovers, '/var/amavis/virus_lovers');
> > And then in /var/amavis/virus_lovers, or whatever your path to the
> file is,
> > put one email address per line of the receivers of invoices or
> campaigns.
> > Not exactly the best way to do things, but should work.
> >
> > Might want to check out this document for a possible better way:
> > http://www200.pair.com/mecham/spam/bypassing.html
> >
> > -Tony
>
> Not very practical. We are talking 10's of thousands of unique
> addresses, and campaigns that change on a weekly basis.
> Mind you, this is not SPAM. It is only being sent to our customers.
> And since we are generating the message, we are fairly confident that
> it
> does not contain a virus. ;-)
>
> That said, it should be relatively easy to send them out without
> scanning first.
>
> The messages originate from the mail server itself, not from another
> internal client. All addresses are to external domains.
>
> Why should this be so difficult?
>