Re: Milter not to all messages

2016-03-11 Thread Andrzej A. Filip
Alfredo Saldanha  wrote:
> Is there some way to use milter check in a type of conditional ?
> In my situation here, it can not be mandatory to each message.
> I'm asking this because some users here want to receive all messages without 
> Spam verification.
>
> Part of my main.cf:
> http://dpaste.com/3HFRR6V

Milter (e.g. MIMEDefang) can conditionally turn off anti-spam checks.

*BUT*

It will work OK for all recipient of the message in the same "spam check" 
category.
Milter anti-spam checks make sense if they "refuse to accept" message in
SMTP session. Due to SMTP design milter's after seeing the message
content can only "accept for ALL recipients" or "reject/delay for ALL 
recipients".

It may be fixed in an UGLY way by using "temporary rejects"
(delaying delivery) for some recipients of "mixed recipients" messages.

-- 
A. Filip


Re: Milter not to all messages

2016-03-11 Thread Tom Hendrikx
On 11-03-16 15:48, Alfredo Saldanha wrote:
> Is there some way to use milter check in a type of conditional ?
> In my situation here, it can not be mandatory to each message.
> I'm asking this because some users here want to receive all messages without 
> Spam verification.
> 
> Part of my main.cf:
> http://dpaste.com/3HFRR6V
> 


I;m using milter-manager [1] as a go-between for all postfix -> milter
connections. Milter-manager supports plugins for whitelisting and other
neat tricks based on envelope details (ip, sender, recipients), and is
easy extensible using ruby. WOrks very nice when off-the-shelf milters
don't support all exclusions you need, or when you don't want to
configure multiple milters in their own separate way.

[1] http://milter-manager.sourceforge.net/

Kind regards,
Tom



signature.asc
Description: OpenPGP digital signature


Re: Milter not to all messages

2016-03-11 Thread Alfredo Saldanha
Nice way, Stephen.
I'll think about that.

Thank you.

- Mensagem original -
De: "Stephen Satchell" <l...@satchell.net>
Para: "Alfredo Saldanha" <asalda...@infolink.com.br>, "postfix-users" 
<postfix-users@postfix.org>
Enviadas: Sexta-feira, 11 de março de 2016 14:11:11
Assunto: Re: Milter not to all messages

On 03/11/2016 06:48 AM, Alfredo Saldanha wrote: 
> Is there some way to use milter check in a type of conditional ? 
> In my situation here, it can not be mandatory to each message. 
> I'm asking this because some users here want to receive all messages without 
> Spam verification. 

When I was running mail servers for a medium-sized web hosting company, 
I ran into the same problem: some customers did not want spam filtering 
on all mailboxes in their domains, or on particular mailboxes in their 
domain. 

So I had an exception list, and my milter would query the exception list 
so that the exceptions could be short-circuited. Easy to do in Perl; 
equally easy to do in Python. 

I had also coded a global exception for "postmaster", so that the mail 
service would be RFC compliant. (I had considered also making a global 
exception for "hostmaster" but decided against it. Not many of our 
customers defined this role account for their domain.) 

Customer didn't want "postmaster"? We would redirect it to the support 
postmaster mail account. Simple. 



Re: Milter not to all messages

2016-03-11 Thread Stephen Satchell

On 03/11/2016 06:48 AM, Alfredo Saldanha wrote:

Is there some way to use milter check in a type of conditional ?
In my situation here, it can not be mandatory to each message.
I'm asking this because some users here want to receive all messages without 
Spam verification.


When I was running mail servers for a medium-sized web hosting company, 
I ran into the same problem:  some customers did not want spam filtering 
on all mailboxes in their domains, or on particular mailboxes in their 
domain.


So I had an exception list, and my milter would query the exception list 
so that the exceptions could be short-circuited.  Easy to do in Perl; 
equally easy to do in Python.


I had also coded a global exception for "postmaster", so that the mail 
service would be RFC compliant.  (I had considered also making a global 
exception for "hostmaster" but decided against it.  Not many of our 
customers defined this role account for their domain.)


Customer didn't want "postmaster"?  We would redirect it to the support 
postmaster mail account.  Simple.




Re: Milter not to all messages

2016-03-11 Thread Alfredo Saldanha
So I need another Postfix instance to do this.
I can use transport maps to select which user will pass in milter.

Thanks Wietse.

- Mensagem original -
De: "Wietse Venema" <wie...@porcupine.org>
Para: "postfix-users" <postfix-users@postfix.org>
Enviadas: Sexta-feira, 11 de março de 2016 11:52:48
Assunto: Re: Milter not to all messages

Alfredo Saldanha: 
> Is there some way to use milter check in a type of conditional ? 

No. Milters can't start somewhere in the middle of an SMTP session. 
They must be able to inspect and respond to all connection stages. 

Wietse 

> In my situation here, it can not be mandatory to each message. 
> I'm asking this because some users here want to receive all messages without 
> Spam verification. 
> 
> Part of my main.cf: 
> http://dpaste.com/3HFRR6V 
> 
> Thanks. 
> 


Re: Milter not to all messages

2016-03-11 Thread Wietse Venema
Alfredo Saldanha:
> Is there some way to use milter check in a type of conditional ?

No. Milters can't start somewhere in the middle of an SMTP session.
They must be able to inspect and respond to all connection stages.

Wietse

> In my situation here, it can not be mandatory to each message.
> I'm asking this because some users here want to receive all messages without 
> Spam verification.
> 
> Part of my main.cf:
> http://dpaste.com/3HFRR6V
> 
> Thanks.
> 


Milter not to all messages

2016-03-11 Thread Alfredo Saldanha
Is there some way to use milter check in a type of conditional ?
In my situation here, it can not be mandatory to each message.
I'm asking this because some users here want to receive all messages without 
Spam verification.

Part of my main.cf:
http://dpaste.com/3HFRR6V

Thanks.