On 2007-08-13, 08:36, Gary V wrote:
> There is a MYUSERS policy bank, but keep in mind senders are often forged.
> This is from amavisd.conf-sample:

I've seen it, but it seems to be unusable for what I'm trying to
accomplish. I want to set up separate settings for  incoming mail
versus outgoing mail.

I need a very similar policy bank, but one that is loaded when the
_recipient_ matches local_domains_maps, instead of the sender.

If the recipient matches local_domains_maps, then load a specified
policy-map which contains settings for incoming mail. All other mail
is outgoing.

> Actually, it's not immediately apparent to me what would prevent a
> forged sender from loading this policy bank so I think it would
> require you to configure Postfix to reject non-authenticated mail
> addressed from any of your domains; which is typically done using
> something like this (which breaks forwarding):
> 
> http://www.arschkrebs.de/postfix/postfix_incoming.shtml
> 
> If you are going to do that, then you might as well use the MYNETS
> policy bank and something like this as an alternate:
> http://www200.pair.com/mecham/spam/bypassing.html#10

I suppose I could also configure postfix to send incoming mail to
filtering on a different port than outgoing mail, and then use
different policy banks for incoming/outgoing.

.. but that was what I hoped I wouldn't have to do, since amavisd
allready has all the information it needs to separate
incoming/outgoing.

-- 
Erland Nylend


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to