Re: [AMaViS-user] policy bank for local recipients.

This is a discussion on Re: [AMaViS-user] policy bank for local recipients. within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Erland, > I need a very similar policy bank, but one that is loaded when the > _recipient_ matches local_domains_maps, ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-13-2007
Mark Martinec
 
Posts: n/a
Default Re: [AMaViS-user] policy bank for local recipients.

Erland,

> I need a very similar policy bank, but one that is loaded when the
> _recipient_ matches local_domains_maps, instead of the sender.


Can't be done. A message can have multiple recipients.

A policy bank applies to a message processing as a whole,
it can conceptually only be loaded on some property that pertains
to a message as a whole, such as sender's IP address,
sender address, incoming port number, ...

A mechanism that applies per-recipient is *_maps lookups.

> If the recipient matches local_domains_maps, then load a specified
> policy-map which contains settings for incoming mail. All other mail
> is outgoing.


Differenting outgoing and all-internal from incoming mail
is based on sending client's IP address (@mynetworks or port-based).

- incoming: foreign sending client
- outgoing: internal sending client and non-local recipient
- internal: internal sending client and local recipient

(authenticatd mail from roaming users should preferably
be handled the same as mail from internal hosts)

> I suppose I could also configure postfix to send incoming mail to
> filtering on a different port than outgoing mail, and then use
> different policy banks for incoming/outgoing.


Yes, that is the way to go.

Also, authenticated mail from roaming clients should be sent
to the filtering port, just as mail originating from inside.


If using a policy bank other than MYNETS for such a purpose,
don't forget to also set:
originating => 1,
key/value pair in such a policy bank.

(with MYNETS this is turned on implicitly for backwards
compatibility; it doesn't hurt to be explicit there too)


See examples in:
http://www.ijs.si/software/amavisd/a...html#pbanks-ex
http://www.ijs.si/software/amavisd/a...docs.html#dkim

Mark

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:26 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0