Am Sonntag, 18. Mai 2008 schrieb Sahil Tandon:
> > None of those FILTER-Actions is possible amavisd-new is connect > > through smtpd_proxy_filter (and that's the only way to filter e-mails > > without having backscatter-problems). And it's not possible to use > > different IPs or tcp-ports using different MX-records, because just > > several users of a domain should be able to send those mails. > > This is false. This is true if you have to pay attention to the German and European law and if you do not want to deliver all that stupid e-mails tagged. > Using amavisd-new after queue does not create a > backscatter problem. Instead of rejecting mail after receipt, simply > discard it. This is not legal here. Under special circumstances deleting communication is a criminal act. (For sure it IS legal if the recipient wants me to do that for you, but it's not legal if I have no permission to do that.) And it could lead to civil liability problems under special circumstances. Life's not that easy. "simply discard it" is not an option if you want to do it *RIGHT* (and that`s what I'm paid for). > You can maintain a user-accessible quarantine so users can > view and release emails if necessary. I know, I know, I know. I'm working as an anti-spam-consultant for more then 12 years know. I'm working on nothing else. [Anyway, I *HATE* quarantines, because they lead to lost/forgotten e-mails, because users do NOT check their e-mails in the quarantine reliable enough.] My question is based on the special setup of one of my clients. So there's no room for changing his whole setup. He/We do NOT want to have a warantine, he/we do NOT want to discard e-mails, he/we DO know that it's possible to spoof a sender address but he/we NEED to do a sender address based whitelist for banned_filetypes because they have to use a closed source software that auto-generates e-mails that contains banned filetypes. No, for special circumstances we can not use different IP number or ports for this software. And AFAIK it is not possible to select a policy bank directly based on a sender's address. > Of course there are pros and cons. Nuances. YMMV. Et cetera. Had I > known you were using amavisd-new as a proxy, I would not have suggested > policy banks. :-) Okay, my question wasn't detailed enough (that's what I always blame our customers for...). :-) Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
