Peter wrote:

> --- Mark Martinec <[EMAIL PROTECTED]> wrote:

>> Peter,
>> 
>> > Hi.  What is the easiest way to have amavisd-new bypass certain
>> sender
>> > envelope addresses?  I am using Postfix.  I am not using SQL
>> lookups.
>> 
>> Ryan Kather writes:
>> > whitelist_sender_maps should be what you need, but as far as I know
>> it
>> > won't bypass scanning.  It will simply scan then pass the message
>> > regardless.  If you really need to disable spam scanning for a
>> certain
>> > *sender* then you may want to look into using policy banks, and
>> hopefully
>> > you won't see the same issues I see.
>> 
>> Right. Apart from whitelisting (or soft-whitelisting), it is
>> intentionally
>> difficult to turn off checks based on sender e-mail address, as this
>> information is not reliable at all - it is in full control of the
>> sender (spammer or not). People would too easily succumb temptation
>> and shoot themselves in the foot.
>> 
>> With a help of client IP address or similar (e.g. authenticated
>> submission),
>> this extra information can be passed to amavisd through policy banks
>> mechanism, providing more reliable foundation for more critical
>> decisions.

> To confirm, I bypass the filter based on client IP address via policy
> banks?  Are there any examples of this in the documentation?

> Peter

There are quite a few examples in the archives. Also see this
documentation:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#pbanks-ex

Here is a simple example:

smtpd_client_restrictions =
   check_client_access hash:/etc/postfix/spam_check_bypass

The contents of the /etc/postfix/spam_check_bypass file could be:
ip.address.of.client FILTER smtp-amavis:[127.0.0.1]:10026

(Don't forget to postmap the file)

In amavisd.conf, modify:
$inet_socket_port = [10024,10026];

and add:

$interface_policy{'10026'} = 'BYPASSSPAM';

$policy_bank{'BYPASSSPAM'} = {
 bypass_spam_checks_maps => [1],
};

Here is a more complex example:
http://marc.theaimsgroup.com/?l=amavis-user&m=113364463710590&w=2

Gary V


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to