On 2025-07-13 at 09:32:46 UTC-0400 (Sun, 13 Jul 2025 07:32:46 -0600)
James Lay via Postfix-users <j...@slave-tothe-box.net>
is rumored to have said:
Hello!
I'm in the process of upgrading to a different machine
postfix/spammassassin/procmail/dovecot. My current setup has ran
great, but I'd like to see about making a couple changes in the
process
of upgrading. Ubuntu 24 has postfix 3.8.6. My questions:
Is there a way to bypass spamassassin for local addresses?
[Wearing my SA PMC Member hat]
There are multiple ways, depending on how you integrate SA and Postfix.
But I urge you not to do so.
SpamAssassin has a robust mechanism for configuring the hosts that you
consider your own (internal_networks,) those from which you routinely
receive email (trusted_networks,) and those through which your users
submit mail initially (msa_networks.) If you configure those correctly,
you can use the related rules (e.g. ALL_TRUSTED) to effectively put a
thumb on the scales against marking truly local mail as spam. By doing
this, you have some protection against your own users or systems being
compromised and used for spamming.
The other reason to do SpamAssassin exemptions from within SpamAssassin
is that you get to refine them very closely if you wish, all the way
from not advantaging local mail at all to having the detection of
locality override all other scanning.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com
addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
