On Fri, Jan 06, 2006 at 11:48:11PM +0100, mouss wrote:
> Covington, Chris a ?crit :
> > 
> > In my opinion, amavisd-new does not need DSPAM support.  As of 3.4.X or
> > 3.6.X (I forget which) DSPAM can run in daemon mode as a LMTP 
> > content-filter.  I use amavisd-new for banned files and A/V, then I have
> > amavisd-new reinject the mail to Postfix which reinjects to DSPAM via 
> > LMTP.  Problem solved.  I suppose it could be cleaner if amavisd-new
> > could support reinjecting to a LMTP content-filter, but the performance
> > is fine.
> > 
> > It looks like this:
> > 
> > postfix->amavisd-new->postfix->dspam lmtp daemon->postfix->mailstore
> > 
> 
> I prefer the other way:
> 
> postfix->AV->postfix->dspam->[postfix]->amavisd-new/SA->postfix
> 
> AV may be an amavisd-new that doesn't run SA, or whatever you prefer.
> (It may also implement policy banks if it's amavisd-new).

For me, amavisd-new only is for A/V and filename banning.

> with:
> 
> - only mail destined to "filtered" domains. other mail may be processed
> by SA if so desired.
> - if mail is "innocent" for dspa, it is scanned by SA (to detect URI
> spam and other "non textual" spam)
> - if dspam confidence is lower than a configured level, pass to SA
> - [optional] if rcpt wants SA anyway (or if his dictionary is still
> immature), pass to SA
> 
> This way, most spam detected by dspam need not be scanned by SA. So SA
> is "only" used to "detect missed spam". Thus its config may be "reduced"
> (no need to have "porn" rules for instance, since one can train dspam
> instead. This isn't true with "non-textual" patterns such as URIBL...).

That's interesting but I'd rather use one or the other.

> > Mark, why don't you just drop DSPAM support (and maybe add LMTP 
> > reinjection like $forward_method = 'lmtp:[127.0.0.1]:24')?  
> > 
> 
> I think it is dspam which should support smtp. I don't find lmtp very
> helpful in my case (I only tag. Scanners take no decision).

I also only tag, and I use dspam as a LMTP Postfix content-filter.  
I don't understand why LMTP and tagging are mutually exclusive?  
To do so one configures dspam.conf as follows:

#
# Daemonized Server: If you are running DSPAM as a daemonized server
# using
# --daemon, the following parameters will override the default. Use the
# ServerPass option to set up accounts for each client machine. The
# DSPAM
# server will process and deliver the message based on the parameters
# specified. If you want the client machine to perform delivery, use
# the --stdout option in conjunction with a local setup.
#
ServerPort              24
ServerQueueSize 32
ServerPID              /var/run/dspam.pid

#
# ServerMode specifies the type of LMTP server to start. This can be one
# of:
#     dspam: DSPAM-proprietary DLMTP server, for communicating with
#     dspamc
#  standard: Standard LMTP server, for communicating with Postfix or
#  other MTA
#      auto: Speak both DLMTP and LMTP; auto-detect by ServerPass.IDENT
#
ServerMode standard

# If supporting standard LMTP mode, server parameters will need to be
# specified
# here, as they will not be passed in by the mail server. The
# ServerIdent
# specifies the 250 response code ident sent back to connecting clients
# and
# should be set to the hostname of your server, or an alias.
#
# NOTE: If you specify --user in ServerParameters, the RCPT TO will be
#       used only for delivery, and not set as the active user for
#       processing.
#
ServerParameters        "--user youruser --deliver=innocent,spam -d %u"
ServerIdent             "yourident"

#
# SMTP or LMTP Delivery: Alternatively, you may wish to use SMTP or LMTP
# delivery to deliver your message to the mail server. You will need to
# configure with --enable-daemon to use host delivery, however you do
# not need
# to operate in daemon mode. Specify an IP address or UNIX path to a
# domain
# socket below as a host.
#
DeliveryHost        127.0.0.1
DeliveryPort        10025
DeliveryIdent       yourserver.example.com
DeliveryProto       SMTP

Then dspam accepts all mail on port 24, processes it, then forwards via
SMTP to (postfix) 10025 which then relays to the mailstore.

---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to