On 2006-01-09 11:36:40 -0500, Swallow, Harold wrote:
> I am a new user of qpsmtpd.
> 
> My current effort is to connect qpsmtpd in a
> Postfix "Advanced Filter" configuration.

You mean as described on
<http://www.postfix.org/FILTER_README.html#advanced_filter>?

> I have noticed the plugins/queue/postfix-queue
> file but was not sure how to tie it into
> Postfix properly.

The postfix-queue is meant to deliver directly to cleanup(8). qpsmtpd
with the postfix-queue plugin does about the same thing as postfix 
smtpd(8).

So, in the diagram on the website mentioned above, you wouldn't need the
smtpd(8) listening on port 10026, as qpsmtpd can feed directly into
cleanup(8):

    Unfiltered -> smtpd(8)                   qmgr(8)    smtp(8)  -> Filtered
                            >- cleanup(8) -> Postfix -<
    Unfiltered -> pickup(8)                   queue     local(8) -> Filtered
                                   ^            |
                                   |            v
                                   |         smtp(8)
                                   |   
                                   |            |
                                   |            v
                                   qpsmtpd  10025


I don't know what you are trying to filter, but I think it is usually
better to let qpsmtpd listen on port 25 instead of postfix:

    Unfiltered -> qsmtpd    -> Filtered                    qmgr(8)    smtp(8)
                                          >- cleanup(8) -> Postfix -<
    Unfiltered -> pickup(8) -> Unfiltered                   queue     local(8)


This is not only a simpler setup, it also allows qpsmtpd to reject mails
during the SMTP dialog, so you never accept fishy mails and therefore
responsibility for them. In the postfix filter setup, postfix has
already accepted the mail and is responsible for either delivering it or
creating a bounce message - which is not good, because for a large
fraction of the messages you want to bounce the sender address is
forged, so you send lots of bounce messages to innocent bystanders (or
you drop messages silently, which isn't good, either).

A mixed blessing in this kind of setup is that only mails received via
SMTP are passing through qpsmtpd. This is what I normally want (Mails
from "outside" are filtered, mails from "inside" are not), but it may
not be what you want. 

        hp

-- 
   _  | Peter J. Holzer    | Ich sehe nun ein, dass Computer wenig
|_|_) | Sysadmin WSR       | geeignet sind, um sich was zu merken.
| |   | [EMAIL PROTECTED]         |
__/   | http://www.hjp.at/ |    -- Holger Lembke in dan-am

Attachment: pgpOBkK8KPpuA.pgp
Description: PGP signature

Reply via email to