From: C. Vorwerk (list-userbackenhoernchen.de)
Date: Sun Dec 02 2007 - 10:59:03 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hallo,

i just about to move from exim to postfix. Though i liked exim, i missed
some capabilities needed for cyrus back end.

Now i setup an test system with smtpd_proxy_filter clamsmtp for denying
virus and phishing mails before complete accepting it. I know about the
problem of getting to much load on the system caused by to much virus
checks, but i don't' like handling viruses for my users making
quarantens or else.
To limit this Problem, i would like to limit the checking to mails with
a size of about 500kb by the smtpd_proxy_filter and check mails above
this to about 10mb again in a content_filter. I already set this up. But
i didn't find a way for the limit handled by postfix. I know, i can set
up two instances of clamavd and set at least the upper limit. The
problem of the lower is still there (and therefor an unneeded double
check) and the usage of doubling the system resources by calmavd (two
instances).

Before writing my own pipe filters, checking the size (and i don't know
how to do this for the proxy filter), i would like to know whether there
is an option i might use or someone who already set something like this up.

Thanks in advance!

Here my master.conf:

127.0.0.1:10025 inet n - n - 16 smtpd
        -o content_filter=smtp-clamavfilter:[127.0.0.1]:10026
        -o smtpd_proxy_filter=
        -o receive_override_options=no_address_mappings
        -o smtpd_helo_restrictions=
        -o smtpd_client_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_delay_reject=no
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks=127.0.0.0/8
        -o smtpd_authorized_xforward_hosts=127.0.0.0/8

smtp-clamavfilter unix - - n - 16 smtp
        -o smtp_send_xforward_command=yes
        -o smtp_enforce_tls=no
        -o disable_dns_lookups=yes

127.0.0.1:10027 inet n - n - 16 smtpd
        -o content_filter=
        -o smtpd_proxy_filter=
        -o
receive_override_options=no_unknown_recipient_checks,no_header_body_checks
        -o smtpd_helo_restrictions=
        -o smtpd_client_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_delay_reject=no
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks=127.0.0.0/8
        -o smtpd_authorized_xforward_hosts=127.0.0.0/8

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]