Sven,

> I'm working through the README.sql and have two questions.
> First, regarding banned rulenames it says in the policy
> table:
> banned_rulenames    varchar(64) default NULL
>   -- comma-separated list of ...
>   -- names mapped through %banned_rules to actual
>   -- banned_filename tables
>
> Am I interpreting this correctly that a proper setup
> could be:
> INSERT INTO policy ( ..., banned_rulenames ) VALUES (..., 'ruleset1' );

Yes.  Or VALUES (..., 'ruleset1,ruleset2,ruleset3' )  if needed.

> and have the following in amavisd.conf:
>
> %banned_rules = { 'ruleset1' => [ # rules as in @banned_filename_re
>                                 ],
>                   'ruleset2' => []
>                 };


Yes. Here is an example (just an illustration, not necessarily useful):

%banned_rules = (
  'NO-MS-EXEC'=> new_RE( qr'^\.(exe-ms)$' ),
  'PASSALL'   => new_RE( [qr'^' => 0] ),
  'ALLOW_EXE' =>  # pass executables except if name ends in .vbs .pif .scr .bat
    new_RE( qr'.\.(vbs|pif|scr|bat)$'i, [qr'^\.exe$' => 0] ),
  'ALLOW_VBS' =>  # allow names ending in .vbs
    new_RE( [qr'.\.vbs$' => 0] ),
  'DEFAULT' => $banned_filename_re,
);

See also RELEASE_NOTES, search for:
  banned filename/filetype rules can now be specified on a per-recipient basis

> Second, would it be possible to add a per-policy wblist that
> is merged with the per-user wblist, where the users wb-list
> takes precedence?
>
> This would allow an easy site-wide configuration via the
> admins without colliding with the users preferences and
> not having to add the same mailaddr.id list to all users
> that are part of a given policy.

The way it currently works comes close.
There can be a sub-domain -wide or site-wide wblists
associated with more general entries in table 'users',
like 'example.com' or or '.example.com' or '.'
If there is no wblists associated with a fully-specified
recipient address, a search continues with more general
'user' table entries.

Now, when using hard w/b-listing ('W' or 'B' in wblist),
the search stops at the first recipient match (specific to general).
If using soft-wblisting, i.e. placing scores in wblist, the search
does not stop and all relevant matching entries are summed up
into a final score boost. See also:
  http://www.ijs.si/software/amavisd/amavisd-new-docs.html#score_sender

Mark


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to