Todd S. Florman wrote:
mouss wrote:
[snip]
PS. using FILTER in a check_recipient_access (as suggested some posts
before) is _unsafe_. it may cause filter evasion using a
multi-recipient email.
Would it be safer if the following line was added to main.cf?
dspam_destination_recipient_limit = 1
No, this doesn't help. This parameter applies at delivery time, not at
reception time.
if you want per recipient filtering, then use multiple postfix
instances. this brings other valuable benefits that outweight the mgmt
overhead (which can be reduced using scripts). with multiple instances,
use transport_maps to select the filter (instead of content_filter). you
can't do that with a single instance because transport_maps are global.
one nice thing with this is that you then can filter bounces (which may
help in the case of some attacks).
