Christan,

> I also stumbled over the DKIM-example, but I do not use amavis over
> content_filter inside postfix. I use the proxy-feature.

With a proxy setup you still have some control over which content filter
to use (or its port number) by the smtpd_proxy_filter option. Now you
need to separate a MX function (receiving mail from outside) from
MSA (mail submission), where your users submit their mail.

To achieve this, either use a dual MTA setup (on separate or the same
host), or just add another alias IP address to your existing host and
bind smtpd services with a MX function on one IP address, and those
with a MSA function to another.

Depending on what your users were told to use as a mail submission
IP address (a host name, i.e. an A record ?), it is probably the easiest
to move a mail receiving side to a new IP address, and let your MX
record point to this new dedicated name, leaving existing name
to continue to be used for mail submission.

Separating MSA from MX has benefits in that you now have full
control over what MTA options and restrictions apply to each, and
at a content filter you can apply different rules (via policy banks)
to each. It makes some decisions easy like what mail to DKIM-sign,
ease some restrictions for originating mail, etc. As far as amavisd
is concerned, mail from MSA should turn on the 'originating' flag
through some policy bank, while the rest of mail should not.

> So if I understand that right, I lose features from amavis <2.6.x Why?

Because formerly the loading of MYUSERS policy bank only relied
on a sender address matching @local_domains_maps, which we
know all to well is trivially in often faked by incoming junk.
The feature was useless as it stood.

> Can I get back the old behavior?

You can remove the '&& $msginfo->originating' from the
condition (if clause) which calls load_policy_bank('MYUSERS').
There a two such code sections in amavisd, just search for 'MYUSERS'.

  Mark

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to