* Diego Gil <diego_do...@yahoo.com.ar> wrote:
> debian 
> etchamavis 2.4.2-6.1postfix 2.3.8-2+etch1perl 5.8.8-7etch6courier 4.1.1.20060828-5 spamassassin
>   3.1.7-2etch1
> y case is very rare and I'm an idiot. 

> 1) Amavis is "supposed" to filter spam, but it seems not to use
> spamassassin, I do not understand, it is not used by default?. This
> is because in a "/etc/ init.d/spamassassin stop" Amavis spam
> filtering continues as usual. 

amavisd-new will load the Spamassassin Perl modules on startup, hence
there is no need to run spamd, and that explains why filtering
continues as usual.

> 2) despite modifying the configuration files and even the Amavis
> amvis ... in many ways, not to enter a header EMAIL SPAM WITH
> LABELS. 

This should be answered in

http://www.ijs.si/software/amavisd/#faq-spam

Search for: "No spam-related headers inserted?", probably, the setting
of "@local_domains_acl" is bogus.

> 3) A FILTER FOR USERS connecting SASL, for instance, if I connect to
> my smtp TLS from using my cell phone and send email to other users
> Amavis filter this email as spam! as you can do that if I set
> postfix users who connect by TLS go right. 

Have a look at: http://wiki.apache.org/spamassassin/DynablockIssues

Since Postfix 2.3 doesn't support RFC 3848, you probably need to isse
a quick

postconf -e 'smtpd_sasl_authenticated_header=yes'
postfix reload

to make sure that authentication headers are added.

> $final_spam_destiny       = D_BOUNCE;

Don't do that on a public server delivering mails to third parties.
Use D_PASS and tag spam appropriately, use plussed addresses on spam
or set it to D_DISCARD and quarantine it.

> smtpd_recipient_restrictions =
> permit_sasl_authenticated,reject_non_fqdn_sender,reject_non_fqdn_recipient,permit_mynetworks,
> reject_unauth_destination

This is not Postfix specific, but accepting not fully qualified sender
and receiver names from SASl authenticated users is questionable,
because the final recipient (sender, if talking about bounces) will be
subject to the setting of append_at_myorigin, append_dot_mydomain and
local_header_rewrite_clients (not 100% sure about that last one).


Cheers
Stefan

------------------------------------------------------------------------------
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to