> Date: Thu, 7 Dec 2006 14:30:48 +0100 > From: Mark Martinec <[EMAIL PROTECTED]> > Subject: Re: [AMaViS-user] sendmail, XFORWARD and policy_banks > To: [email protected] > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="us-ascii" > > Claude, > > > I think, a very simple solution would be do include a special X-Header in > > the message coming from the receiving sendmail instance, in which one the > > IP address of the client would be included. sendmail can easily be > > configured in order to do this. Because this receiving sendmail instance is > > only in communication with amavisd, there should be no security problem. > > If necessary, amavisd could remove this special header. > > What is your opion, Mark ? > > In a dual-MTA setup the client IP address is already available in a > Received header fields, so no extra header fields would be needed. > The trace parsing routine is already in the code (sub parse_received), > but would need to be invoked to find the topmost Received field. For > concept-compatibility with SA, the SA mechanism on trusted/external > networks should probably be adopted, although this can be quite a > can of worms. > > Mark
Mark, Which problems do you worry about if using sub parse_received ? Could these problems be avoided using a special X header ? Which problems could be avoided using an additional socket with a policy-bank which would occur when using sub parse_received or a special X header ? Claude ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
