Robert,

> > Something like this?
> > @@ -7730,6 +7730,22 @@

> Sounds not too bad so far. Allthough, I rather was thinking of system().
> I'm not sure which ones causes more overhead, creating a UNIX TCP Socket,
> or calling a script. Since the variables are tainted it won't raise a
> security case.

Opening a socket to an existing process is much faster and less resource 
hungry compared to fork/exec as done by system(). If only your architecture
allows such approach.

One can even keep socket peristently connected for a lifetime of an
amavisd child process, although it is probably not worth the trouble. 

> Also, a script would give more freedom.

Possibly. A script is certainly easier to set-up, no need to worry
about starting daemons.

> Drawback is, that it would require 
> a plugin directory where administrators/developers MUST put their scripts
> in, or at least configure a plugin directory with correct permissions and
> group/owner.

I don't have immediate plans to provide plugins mechanisms,
so for now you will have to do with a patch. If something similar
to my patch can do the job, it is not too bad - the code is pretty
much self-contained and a patch would be applicable across several
versions of amavisd-new.

> Second part is, the level 10 was rather plaintext, of course I meant
> $sa_kill_level_deflt, or even a new level,
> $sa_(report|script|administrativa)_level_deflt; I'm not sure which is most
> convenient and reasonable.

That's up to you to decide.

> In terms of speed and time, I myself would go for the Socket too, because
> I could make amavis talk directly to the cache, however, it's not very
> portable^Wflexible, is it?

As far as portability is concerned, Unix sockets are not a problem,
as long as one stays on Unix or Linux - and amavisd-new does not run
on non-POSIX systems.

  Mark


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to