>> smtpd_client_restrictions =
>>     check_client_access
>> proxy:mysql:/etc/postfix/mysql-check-client-filter-access.cf
>> ->    check_recipient_access
>> proxy:mysql:/etc/postfix/mysql-relay-filter-domain.cf
>>
>> After I have modified the query part  of 'check_client_access'
>> restriction as follows:
>>
>> query = select IF(STRCMP(action,'OK'),action,'DUNNO') from access where
>> inet_aton(ip) & inet_aton(mask) = inet_aton('%s') & inet_aton(mask)
>> order by mask DESC limit 0,1;
>>
>> and set the query part  of 'check_recipient_access' restriction as
>> follows:
>>
>> query = select if(count(*)>0,'OK','FILTER
>> smtp-amavis:[127.0.0.1]:10026') from domain where domain='%s' and
>> active='1'
>>
>> But I don't have fully verified that this solution could be a correct
>> one. Could it work? Anyway, has anyone a better solution to my latest
>> issue?
>
> You must not forget that a message can have more than one recipient,
> so a message could be both internal-to-internal and outbound
> at the same time. It is dangerous (and usually incorrect)
> to tack a FILTER in a check_recipient_access, because these
> rules are run multiple times (for each recipient), and only
> the last FILTER setting remains in place. So the resulting
> FILTER would depend on what was the last recipient specified
> (internal or external).
>
Infact! I left out this aspect! Indeed, a policy compliant with the my aim
could be to omit virus scanning for outbound messages. In the sense that,
if a message is either internal-to-internal and outbound then the message
would be scanned as well.

How could obtain this?

Moreover, where is a suitable place where to perform recipient checking?

rocsca


------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to