Re: [AMaViS-user] Using amavis-new for compliance?

At 04:39 AM 5/3/2007, Robert Felber wrote:
>On Thu, May 03, 2007 at 11:06:07AM +0200, Ralf Hildebrandt wrote:
> > * Jeremy Laidman <jlaidman@rebel-it.com.au>:
> > > Hi
> > >
> > > Has anyone shoehorned amavis-new to do compliance policy such
> as required for
> > > HIPAA? By this I mean detecting keywords within a message that suggest
> > > leakage of personal information (medical records, social
> security numbers and
> > > the like).
> >
> > That's a beautiful idea. We'd need that for the Charite as well.
>
>Can't that be achieved with restriction classes (check only outgoing mail,
>i.e. recipient != your/allowed-leakage domains) and body checks?

No, body_checks apply to all mail. Restriction classes apply to
envelope information, not content.
This will need to be done in some sort of content filter or milter
outside of postfix. An amavisd-new pseudo virus scanner is a good
solution except for multi-recipient issues.

>Ideally this should be managed such, that multirecipient mail, i.e. one
>recipient for your or for allowed-leakage domains and one recipient
>for foreign domains are handled corretcly.

Multi-recipient mail will still be a problem as amavisd-new currently
has no way to apply individual virus scanners on a
per-domain/per-user basis. Virus_lovers/bypass_virus_checks could
only be used if you don't have any other virus scanners defined. Or
pass through two instances of amavisd-new, one configured for 'real'
virus and spam scanning and another for just compliance pseudo-virus scanning.

--
Noel Jones


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/