Thus spake Lindsay Haisley on Wed, May 01, 2002 at 09:07:35PM CDT
> Thus spake Sam Varshavchik on Wed, May 01, 2002 at 07:21:06PM CDT
> > Lindsay Haisley writes: 
> > 
> > > In order for a system courierfilter (in /var/lib/filters rather than
> > > /var/lib/allfilters) to be in the loop, my understanding is that rcptfilter
> > > _must_ return an exit code of 99.  This is necessary.  Is it also
> > > sufficient?  In other words, if there is _no_ local content filter file
> > > (smtpfilter) is its absence simply ignored and mail delivered as if
> > > smtpfilter were there and had terminated with a zero exit code?
> > 
> > You are mixing up two different APIs.  rcptfilter and smtpfilter API is a 
> > per-recipient API; this is completely separate from the global filter APIs 
> > (except that, of course, if one rejects the mail the rest won't even get to 
> > filter it in the first place). 
> 
> No, I know what I'm asking here.  There's no confusion.  I played with it
> and found out that if rcptfilter returns 0 (or rcptfilter doesn't exist),
> the message is effectively whitelisted and the global filter is bypassed,
> unless the global filter socket is in allfilters instead of filters.

Well I bounced a number of virus-laden emails off of some test accounts on
my courier setup.  Proper processing by local filters in .mailfilters (i.e.
rcptfilter returns 99) in an alias@domain hosteddomain account requires
rcptfilter-ext, which can be rcptfilter-default if necessary.  This enables
global filters.  Failure to find a proper rcptfilter file effectively
whitelists mail through the account and global filters are bypassed.

Very nice!  The more I work with my courier setup the more impressed I am
with the fine granularity of control I have over stuff.  It's damned
elegant!

-- 
Lindsay Haisley       | "Everything works    |     PGP public key
FMP Computer Services |       if you let it" |      available at
512-259-1190          |    (The Roadie)      | <http://www.fmp.com/pubkeys>
http://www.fmp.com    |                      |

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to