On 12/08/05 17:51, Sander Holthaus - Orange XL wrote:
> Bowie Bailey <[EMAIL PROTECTED]> wrote:
>>How would you prevent looping?  If you submit a new message
>>to sendmail, it will come back through amavis.  That could
>>create quite a nasty feedback loop.

If you are running at least Courier 0.49 and do not put "local" in
/etc/courier/enablefiltering, then messages received locally via
sendmail will not be sent to amavis.  I realise that this prevents
scanning of locally-originating mail sent from the command line but
including local in enablefiltering is not something I would recommend
due to potential DoSes.

> Another sollution would be to make a small maildrop-filter that adds
> header-information after it has passed Amavisd-new, though this still would
> prevent Courier from adding Spam-headers to messages that are being
> forwarded relayed to another mx / mail-account. My main concern with using
> submit / sendmail would be that Courier may add extra Received-headers.

Do you mean that amavisd-new should record the SA results somewhere so
that the maildrop-filter could reuse that?  I suppose that could be made
to work but it doesn't sound elegant.

Resubmitting the message would result in an extra Received header; I
don't think there is much that can be done about that, although it would
look different from the primary Received header.  I am also concerned
about possible problems with address rewriting being done twice,
especially if amavis has changed the recipient address in between.

-- 
Martin Orr


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to