Erland,

> I need a very similar policy bank, but one that is loaded when the
> _recipient_ matches local_domains_maps, instead of the sender.

Can't be done. A message can have multiple recipients.

A policy bank applies to a message processing as a whole,
it can conceptually only be loaded on some property that pertains
to a message as a whole, such as sender's IP address,
sender address, incoming port number, ...

A mechanism that applies per-recipient is *_maps lookups.

> If the recipient matches local_domains_maps, then load a specified
> policy-map which contains settings for incoming mail. All other mail
> is outgoing.

Differenting outgoing and all-internal from incoming mail
is based on sending client's IP address (@mynetworks or port-based).

- incoming: foreign sending client
- outgoing: internal sending client and non-local recipient
- internal: internal sending client and local recipient

(authenticatd mail from roaming users should preferably
be handled the same as mail from internal hosts)

> I suppose I could also configure postfix to send incoming mail to
> filtering on a different port than outgoing mail, and then use
> different policy banks for incoming/outgoing.

Yes, that is the way to go.

Also, authenticated mail from roaming clients should be sent
to the filtering port, just as mail originating from inside.


If using a policy bank other than MYNETS for such a purpose,
don't forget to also set:
  originating => 1,
key/value pair in such a policy bank.

(with MYNETS this is turned on implicitly for backwards
compatibility; it doesn't hurt to be explicit there too)


See examples in:
  http://www.ijs.si/software/amavisd/amavisd-new-docs.html#pbanks-ex
  http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim

Mark

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to