I handle all mail via a sendmail milter (amavisd-milter). There is no if/then/else around the milter submission in sendmail. (nor in postfix without setting up another MTA instance on a different port)
On Oct 6, 2008, at 3:12 PM, [EMAIL PROTECTED] wrote: >> Very simple: due to limitations in the ticketing system software, I >> have to pipe some messages to an alias entry that either discards the >> message or remails to it specific people. Right now this means every >> message gets scanned twice, with headers added twice. >> >> Is there a useful way to tag a message locally so that it won't be >> rescanned if *our* amavisd has already scanned it? Yes I realize >> that >> this could be forged remotely. > > > I'm not a Postfix guru by any means, though can happily apply my Exim > knowledge to the task at hand. > > Exim allows you to add a HMAC header into the mesage, with a secret > key, > Postfix must do the same. You can happily add an (encrypted) header > in > the message, consisting of a hash of (the message id?), encrypted with > your private key. > > When it comes to reinjection time you can simply check whether this > header > is present (and that the header is consistent with the message ID > and your > private key). If everything matches you know that the message has > previously been seen by you. Assuming that your private key is nicely > complex and not compromised or known by third parties then there is > absolutely no way to forge this. > > Take a look at the Exim 'exiscan' docs for more details - > http://wiki.exim.org/ExiscanExamples > > >> Or should I approach it differently to avoid scanning localhost >> submitted items? > > It's been a while since I looked at my setup, though I seem to > remember > that anything that was received from localhost was implicitly > assumed to > be clean - and hence bypassed scanning. I can't think why this > would be > bad - other than if 'localhost' were compromised to send out spam and > malware. > > > Sorry this is somewhat Exim specific, though hopefully this points > you in > the right direction. No doubt others will be able to help if you need > Postfix / other MTA assistance. > > > > Regards > > > > Richard > > > > > -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
