Am Sonntag, 18. Mai 2008 schrieb Sahil Tandon:

> > None of those FILTER-Actions is possible amavisd-new is connect
> > through smtpd_proxy_filter (and that's the only way to filter e-mails
> > without having backscatter-problems). And it's not possible to use
> > different IPs or tcp-ports using different MX-records, because just
> > several users of a domain should be able to send those mails.
>
> This is false.  

This is true if you have to pay attention to the German and European law 
and if you do not want to deliver all that stupid e-mails tagged.

> Using amavisd-new after queue does not create a 
> backscatter problem.  Instead of rejecting mail after receipt, simply
> discard it.

This is not legal here. Under special circumstances deleting communication 
is a criminal act. (For sure it IS legal if the recipient wants me to do 
that for you, but it's not legal if I have no permission to do that.)

And it could lead to civil liability problems under special circumstances.

Life's not that easy. "simply discard it" is not an option if you want to 
do it *RIGHT* (and that`s what I'm paid for).

> You can maintain a user-accessible quarantine so users can 
> view and release emails if necessary.

I know, I know, I know. I'm working as an anti-spam-consultant for more 
then 12 years know.  I'm working on nothing else.

[Anyway, I *HATE* quarantines, because they lead to lost/forgotten 
e-mails, because users do NOT check their e-mails in the quarantine 
reliable enough.]

My question is based on the special setup of one of my clients. So there's 
no room for changing his whole setup. He/We do NOT want to have a 
warantine, he/we do NOT want to discard e-mails, he/we DO know that it's 
possible to spoof a sender address but he/we NEED to do a sender address 
based whitelist for banned_filetypes because they have to use a closed 
source software that auto-generates e-mails that contains banned 
filetypes. No, for special circumstances we can not use different IP 
number or ports for this software. And AFAIK it is not possible to select 
a policy bank directly based on a sender's address.

> Of course there are pros and cons.  Nuances.  YMMV.  Et cetera.  Had I
> known you were using amavisd-new as a proxy, I would not have suggested
> policy banks. :-)

Okay, my question wasn't detailed enough (that's what I always blame our 
customers for...). :-)

Peer





-- 
Heinlein Professional Linux Support GmbH
Linux: Akademie - Support - Hosting

http://www.heinlein-support.de

Zwangsangaben lt. §35a GmbHG:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg, 
Geschäftsführer: Peer Heinlein  -- Sitz: Berlin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to