Re: [AMaViS-user] MYNETS problem

That policy bank is set by amavisd-milter. Are you using that?

On Feb 14, 2008, at 2:03 AM, RJ45 wrote:
> now MYNETS policy bank works with sendmail and amavisd-new
> but how to use policy bank SMTP_AUTH ?
> from hte logs I see it is complitely ignored
>
>
> thanks
>
> Rick
>
>
> On Wed, 13 Feb 2008, Mark Martinec wrote:
>
>> Rick,
>>
>>> the problem is that I would like internal clients to be into a
>>> bypass
>>> policy bank so that virus checks are bypassed.
>>> I tryed with default MYNETS policy bank.
>>> This does not work because I am using sendmail (And I need
>>> sendmail not
>>> postfix) and sendmail does not support XFORWARD extension.
>>> Is there a ways to bypass SMTP_AUTH users or internal network
>>> users to
>>> being virus checked by default ?
>>
>> Is this a dual-sendmail setup or a milter setup?
>>
>>
>> amavisd-milter 1.3.* has a way of passing IP address and a
>> policy bank name to amavisd:
>>
>> - Implemented AM.PDP request attribute policy_bank (amavisd-new
>> 2.5.0 or higher is required). Currently SMTP_AUTH,
>> SMTP_AUTH_<MECH>
>> and SMTP_AUTH<MECH>_<BITS> policy bank names are sent when the
>> remote
>> client is authenticated.
>>
>>
>> With a dual sendmail setup, there should be a way to let sendmail
>> feed a message to an alternative 'mailer' based on some criteria
>> (e.g. mail submission), although I'm not that familiar with sendmail
>> to know how to do it.
>>
>>
>> My current amavisd code has the following feature:
>>
>> - in the absence of a smtp client's IP address (normally received
>> by XFORWARD
>> smtp command from Postfix, or in the 'client_address' attribute
>> of AM.PDP),
>> parse the topmost one or two Received header fields and use the
>> first
>> valid IP address found there; based on a suggestion by Richard
>> Bishop;
>>
>> which will probably fit your needs, to be able to load MYNETS
>> policy bank.
>> Will be available with the next amavisd-new pre-release or RC.
>>
>>> ...bypass SMTP_AUTH users or internal network users to
>>> being virus checked by default ?
>>
>> You wouldn't want to do that.
>>
>> Mark
>>
>> ---------------------------------------------------------------------
>> ----
>> This SF.net email is sponsored by: Microsoft
>> Defy all challenges. Microsoft(R) Visual Studio 2008.
>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
>> _______________________________________________
>> AMaViS-user mailing list
>> AMaViS-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/...fo/amavis-user
>> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
>> AMaViS-HowTos:http://www.amavis.org/howto/
>>
>
> ----------------------------------------------------------------------
> ---
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/...fo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/

--
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source
and other randomness



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/