> Date: Tue, 5 Jun 2012 11:58:56 +0200
> From: [email protected]
> To: [email protected]
> Subject: Re: [policyd-users] Define amavisd config to work with policyd
> 
> On 05/06/2012 10:53, Manel Gimeno Zaragozá wrote:
> > For example, if I leave uncommented the following options in
> > amavisd.conf then policyd do not "update" o "Override" the value, no
> > matter what i put in web interface:
> >
> > $sa_tag_level_deflt = -999;
> > $sa_tag2_level_deflt = 5.0;
> > $sa_kill_level_deflt = 6.9;
> > $sa_spam_subject_tag = '[SPAM_amavis]';
> >
> > I would like to know which options should leaved uncommented and which
> > ones should I comment to control everything from policyd.
> >
> > Other example is "virus scan", I can't control virus scan from policyd.
> > No matter what I put in policyd, it always check viruses.
> >
> > I'm using Centos 6, amavisd-new-2.6.4-2.el5.x86_64 and
> > cluebringer-snapshot-2.1.x-201205100639.
> 
> Policyd will override the policy bank. Have you applied the patch and 
> are you using the official tar.gz?

I've not applied any patch to the snapshot 201205100639. Could you please guide 
me to it?

On the other hand, I have just defined this policy banks in amavis:

$policy_bank{'MYNETS'} = {   # mail originating from @mynetworks
  originating => 1,  # is true in MYNETS by default, but let's make it explicit
  os_fingerprint_method => undef,  # don't query p0f for internal clients
};

# it is up to MTA to re-route mail from authenticated roaming users or
# from internal hosts to a dedicated TCP port (such as 10026) for filtering
$interface_policy{'10028'} = 'ORIGINATING';

$policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our users
  originating => 1,  # declare that mail was submitted by our smtp client
  allow_disclaimers => 1,  # enables disclaimer insertion if available
  # notify administrator of locally originating malware
  #virus_admin_maps => ["virusalert\@$mydomain"],
  #spam_admin_maps  => ["virusalert\@$mydomain"],
  warnbadhsender   => 1,
  # forward to a smtpd service providing DKIM signing service
  #forward_method => 'smtp:[127.0.0.1]:10027',
  # force MTA conversion to 7-bit (e.g. before DKIM signing)
  smtpd_discard_ehlo_keywords => ['8BITMIME'],
  bypass_banned_checks_maps => [1],  # allow sending any file names and types
  terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
};

$interface_policy{'SOCK'} = 'AM.PDP-SOCK'; # only applies with $unix_socketname

# Use with amavis-release over a socket or with Petr Rehor's amavis-milter.c
# (with amavis-milter.c from this package or old amavis.c client use 'AM.CL'):
$policy_bank{'AM.PDP-SOCK'} = {
  protocol => 'AM.PDP',
  auth_required_release => 0,  # do not require secret_id for amavisd-release
};


Which one will it override?

Thanks & regards.
                                          
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to