Re: [AMaViS-user] Problem with Postfix aliases and amavis per-user spam and virus policies

2006-06-09 Thread Valentin Schmid - ICSurselva AG
  Noel Jones wrote:

At 08:58 AM 6/8/2006, Valentin Schmid - ICSurselva AG wrote:
  

Unfortunatelly the aliases will be interpreted by postfix 
after the
mailfiltering, so amavisd-new
can't select the different policies per user.
How do I change this?



Remove the no_address_mappings from main.cf, and add it to 
the existing receive_override_options in master.cf.
This will turn off the rewriting after amavisd-new.

# master.cf
127.0.0.1:10025 inet  n-n--smtpd
-o content_filter=
  ...
   -o 
receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_address_mappings
  

Thanks a lot.
It seems to work like expected.

-- 
Valentin Schmid
[EMAIL PROTECTED]
Tel.: ++41 81 936 03 75
Fax:  ++41 81 936 03 76
ICSurselva AG - Internet Intranet Solutions



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Ignore first upstream client

2006-06-09 Thread Per olof Ljungmark
Clifton Royston wrote:
 On Fri, Jun 09, 2006 at 01:16:46AM +0200, Per olof Ljungmark wrote:
 Hi all,

 I'm moving our content filtering from the frontend smtp-servers to an 
 inside relay. After a test, I can see that while it seems to work ok, 
 all spam is marked Spam from local ip-of frontend smtp.

 How can I tell amavisd to ignore our incoming servers and report the 
 first external relay instead?

 All are running postfix 2.2 or 2.3 and amavisd-new-2.4.1.

 ext-smtp-smtp/amavis-mail server
 port 25   10024   25
 
   If I understand the question correctly, I think you want to configure
 internal_networks in the correct location for your SpamAssassin
 local.cf file.

Yes, it definitely looks like it but I still get
SPAM FROM LOCAL [frontend-ip] [EMAIL PROTECTED]
even with internal_networks in local.cf. When you say correct 
location, does it mean it has to go into a certain place in local.cf? 
Also, I assume this parameter is SA and not amavis so the proper place 
to ask should be the SA-list...


___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Adding headers on email

2006-06-09 Thread Raul I. Becette
I tried to send the reply yesterday with the result of the search in the 
log file attached in a txt file but it was delayed until moderator approval.
Sorry for the long message

Gary V escribió:
 Raul wrote:

   
 The server is a mail gateway that processes all incoming/outgoing mail
 and then forwards them to the destination server. Amavis calls spamd 
 after mail has been processed.
 Spamd is running
 

 Amavis uses Mail::SpamAssassin Perl module directly and does not pass
 mail to spamd and does not require spamd to be running. How have you
 configured your system to pass mail to spamd? If you are sending mail
 to spamd after amavisd-new has processed it then that might explain
 why the headers were apparently once
 there (as evidenced by mail in your quarantine) but now are missing.
 Spamd needs to be taken out of the loop, and then stopped. Then make
 sure mail still flows (with no errors in your log).

 I would try setting
 $SYSLOG_LEVEL = 'mail.info';

 along with $log_level = 5; to see if you get the text we were looking
 for earlier. Send a (non spam) message through and see if you get the
 text. Don't forget to reload amavisd. And to set things back the way
 they were after the testing is complete.
   
[EMAIL PROTECTED]:/var/log# egrep local_domains maillog
Jun  8 17:41:24 unpata amavis[13448]: (13448-01) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:25 unpata amavis[13449]: (13449-01) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:34 unpata amavis[13448]: (13448-02) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:34 unpata amavis[13448]: (13448-02) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:34 unpata amavis[13448]: (13448-02) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:34 unpata amavis[13448]: (13448-02) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:36 unpata amavis[13448]: (13448-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:38 unpata amavis[13449]: (13449-02) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:49 unpata amavis[13448]: (13448-04) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:41:58 unpata amavis[13449]: (13449-03) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:11 unpata amavis[13448]: (13448-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:16 unpata amavis[13449]: (13449-04) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:18 unpata amavis[13449]: (13449-05) lookup (local_domains) 
= true,  [EMAIL PROTECTED] matches, result=1, 
matching_key=(constant:1)
Jun  8 17:42:44 unpata amavis[13449]: (13449-06) lookup 

Re: [AMaViS-user] Releasing from a quarantine

2006-06-09 Thread Sam Tran
On 5/30/06, Bartłomiej Syryjczyk [EMAIL PROTECTED] wrote:
 Is it possible to release mail from quarantine when the method is set to
 sql:?guzik

Yes it is.
Please read the following documentation pertaining to message release
from quarantine:
http://www.ijs.si/software/amavisd/README.protocol.txt

If you wish to use a web interface to release message from quarantine,
take a look at MailZu:
http://www.MailZu.net

Sam




 
 Poczta wysłana za pomocą programu ZaWiKo
 




 ___
 AMaViS-user mailing list
 AMaViS-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/amavis-user
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
 AMaViS-HowTos:http://www.amavis.org/howto/

___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Adding headers on email

2006-06-09 Thread Gary V
Raul wrote:

 I tried to send the reply yesterday with the result of the search in the 
 log file attached in a txt file but it was delayed until moderator approval.
 Sorry for the long message

 Jun  8 17:50:51 unpata amavis[13548]: (13548-09) lookup (local_domains)
= true,  doeunp(a)example.edu.ar matches, result=1,
 matching_key=(constant:1)

 Jun  8 17:51:04 unpata amavis[13551]: (13551-10) lookup (spam_tag_level)
= undef, grs(a)example.edu.ar does not match

OK, looks good. I just wanted to make sure that these two settings
were as they should be. I was only expecting output from one or two
test messages. As stated in the previous post, work on taking spamd or
spamassassin out of the loop (if it is there) and killing spamd (and
preventing it from starting up in the future). As I said, I believe
the headers are removed after amavisd-new has processed them. If you
do this:

grep ') header:' /var/log/mail.log (or)
egrep '\) header:' /var/log/mail.log

you should see for each message that was in your report, log lines
similar to this:

(14495-01) header: Received: from sfm.example.com ([127.0.0.1])\n by
  localhost (sfm.example.com [127.0.0.1]) (amavisd-new, port 10024)\n
   with ESMTP id 14495-01 for [EMAIL PROTECTED];\n Fri,  9 Jun 2006
08:01:39 -0600 (MDT)\n
(14495-01) header: X-Virus-Scanned: by amavisd-new-2.3.3
  (20050822) (Debian) at example.com\n
(14495-01) header: X-Spam-Status: No, score=-0.095 required=8
  tests=[ALL_TRUSTED=-1.44,\n MISSING_SUBJECT=1.345]\n
(14495-01) header: X-Spam-Score: -0.095\n
(14495-01) header: X-Spam-Level: \n

If you don't, then I would say the headers are not written, but if you
do, I would think they are.

BTW, its usually (but not in every case) a good idea to obfuscate email
addresses when posting to mailing lists, but mailing list archives do
have measures in place to help prevent address harvesting.

Gary V



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Adding headers on email

2006-06-09 Thread Gary V
Another way to help test that amavisd-new is writing something to
the headers is to temporarily set $final_spam_destiny = D_PASS; and
make sure you have enabled $sa_spam_subject_tag = '***SPAM*** '; and
send yourself a spam message. You should get the message in your inbox
with the subject line prefixed with ***SPAM***. If you send yourself
the gtube string, you should do it from an account outside your network.
One that you would typically not use to send mail to yourself. If you
need the gtube string, I have provided it here:
http://www200.pair.com/mecham/spam/gtube.txt
The text on the Subject: line should not be removed by SpamAssassin.

According to the SpamAssassin documentation, an X-Spam-Checker-Version
header will be written by SpamAssassin. Are you seeing this header?

I will admit I am pretty much stumped at this point. If SpamAssassin
is called after processing by amavisd-new, depending on spamassassin
settings, SpamAssassin would likely write its own set of headers. If
you are not seeing any of those either, I'm not sure what is going on.
Also, in a test I did, with spamc/spamd running after amavisd-new
(mail was detected as spam and passed to the recipient), the original
message was defanged (included as an attachment in a spamassassin report).

If spamassassin was called after amavisd-new, I would think there
would be more evidence of it than simply having the X-Spam headers
removed. For this reason, I'm not sure what is happening at this
point, and I'm not seeing what I may have missed. Sorry

Gary V



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


[AMaViS-user] Upgrade to 2.4.1 Presented Problems

2006-06-09 Thread Bill Martin
We have a problem that we are trying to resolve but are having no luck.

Currently we are using Amavisd-new 2.4.1 which we recently upgraded to.  Along 
with that we upgraded Postfix and ClamAV.  Amavis was an in place upgrade from 
2.3.1 and not a fresh install.

Since upgrading, any virus that is detected by ClamAV and is being tagged but 
not dropped as it had been in 2.3.1.  Here is the meat of the current config:
 *--start of amavisd.conf
use strict;
$MYHOME = /var/amavis;
$QUARANTINEDIR = undef;
$daemon_chroot_dir = undef;
$db_home   = $MYHOME/db;
@local_domains_maps = ( [.$mydomain] );
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
  10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );
$policy_bank{'AM.PDP-SOCK'} = { protocol='AM.PDP' };
@addr_extension_virus_maps  = ('virus');
@addr_extension_spam_maps   = ('spam');
@addr_extension_banned_maps = ('banned');
@addr_extension_bad_header_maps = ('badh');
$path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
$dspam = undef;
$MAXLEVELS = 14;
$MAXFILES = 1500;
$sa_spam_subject_tag = '[SPAM] ';
%final_destiny_by_ccat = (
  CC_VIRUS,  D_DISCARD,
  CC_BANNED, D_DISCARD,
  CC_UNCHECKED,  D_PASS,
  CC_SPAM,   D_DISCARD,
  CC_BADH,   D_PASS,
  CC_OVERSIZED,  D_DISCARD,
  CC_CLEAN,  D_PASS,
  CC_CATCHALL,   D_PASS,
);
@keep_decoded_original_maps = (new_RE(
  qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
));

snip - left out additional bans, etc

@decoders = (
  ['mail', \do_mime_decode],
  ['asc',  \do_ascii],
  ['uue',  \do_ascii],
  ['hqx',  \do_ascii],
  ['ync',  \do_ascii],
  ['F',\do_uncompress, ['unfreeze','freeze -d','melt','fcat'] ],
  ['Z',\do_uncompress, ['uncompress','gzip -d','zcat'] ],
  ['gz',   \do_gunzip],
  ['gz',   \do_uncompress,  'gzip -d'],
  ['bz2',  \do_uncompress,  'bzip2 -d'],
  ['lzo',  \do_uncompress,  'lzop -d'],
  ['rpm',  \do_uncompress, ['rpm2cpio.pl','rpm2cpio'] ],
  ['cpio', \do_pax_cpio,   ['pax','gcpio','cpio'] ],
  ['tar',  \do_pax_cpio,   ['pax','gcpio','cpio'] ],
  ['tar',  \do_tar],
  ['deb',  \do_ar,  'ar'],
  ['zip',  \do_unzip],
  ['rar',  \do_unrar,  ['rar','unrar'] ],
  ['arj',  \do_unarj,  ['arj','unarj'] ],
  ['arc',  \do_arc,['nomarch','arc'] ],
  ['zoo',  \do_zoo, 'zoo'],
  ['lha',  \do_lha, 'lha'],
  ['cab',  \do_cabextract,  'cabextract'],
  ['tnef', \do_tnef_ext,'tnef'],
  ['tnef', \do_tnef],
  ['exe',  \do_executable, ['rar','unrar'], 'lha', ['arj','unarj'] ],
);
@av_scanners = (
['ClamAV-clamd',
  \ask_daemon, [CONTSCAN {}\n, /var/run/clamav/clamd],
  qr/\bOK$/, qr/\bFOUND$/,
  qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);
@av_scanners_backup = (
  ['ClamAV-clamscan', 'clamscan',
--stdout --disable-summary -r --tempdir=$TEMPBASE {},
[0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);

### *--- end of amavisd.conf 

Now, we run the same exact config on 2.3.1 (excluding the new methods for 
final destination actions ) and have no problem what so ever.  What are we 
missing here?

Any help would be greatly appreciated . . . .. 
-bill-



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] negative spam scores

2006-06-09 Thread Bowie Bailey
Terry wrote:
 I have seen a few things about this in my searches but no concrete
 answers and fixes.  I am sure it is a configuration error on my part
 but I don't see where.  I am getting negative hit scores for spam
 messages.   Please reply with information that I can post that would
 help resolve this issue.

Information please!!!

Post the spam headers you are seeing on the emails.  We need to know
which rules are causing the negative score before we can help you.

If you have one of the messages in a file, you can run it through SA
manually like this to see the headers:

spamassassin -t  spam.msg

Make sure you run it as the same user Amavis runs as.

-- 
Bowie


___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] negative spam scores

2006-06-09 Thread Stuart Johnston
Terry wrote:
 I have seen a few things about this in my searches but no concrete
 answers and fixes.  I am sure it is a configuration error on my part
 but I don't see where.  I am getting negative hit scores for spam
 messages.   Please reply with information that I can post that would
 help resolve this issue.

Probably the most common reason for incorrect negative scores is a 
misconfigured trusted_networks:

http://wiki.apache.org/spamassassin/TrustPath

Or the AWL:

http://wiki.apache.org/spamassassin/AutoWhitelist


___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Ignore first upstream client

2006-06-09 Thread Stuart Johnston
Per olof Ljungmark wrote:
 Hi all,
 
 I'm moving our content filtering from the frontend smtp-servers to an 
 inside relay. After a test, I can see that while it seems to work ok, 
 all spam is marked Spam from local ip-of frontend smtp.
 
 How can I tell amavisd to ignore our incoming servers and report the 
 first external relay instead?
 
 All are running postfix 2.2 or 2.3 and amavisd-new-2.4.1.
 
 ext-smtp-smtp/amavis-mail server
 port 25   10024   25

Try adjusting your @mynetworks setting in amavisd-new.


___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] what how ...

2006-06-09 Thread Michael Scheidell
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf 
 Of Pablo L. Arturi
 Sent: Friday, June 09, 2006 5:51 PM
 To: amavis-user@lists.sourceforge.net
 Subject: [AMaViS-user] what how ...
 
 
 Hello dear list.
 
 I have to deploy a spam and antivirus system for a large 
 email system. My idea is to setup 
 postfix+mysql+amavis-new+clamav+sa to work as a email 
 filtering gateway. I have this numbers:
 
 Email accounts: 18000
 Messajes received daily: 280.000
 

Is that 280.000 NON-SPAM? What is the number INCLUDING SPAM?
(maybe 400.000? About 86% spam ratio?)
You looking at doing this on one big box or multiple servers?
What about load balancing? Failover? High availability?

(ps, don't anyone go to www.bairesweb.com  some unknown strange vbscript
tries to pop something up.
Firefox blocked it)

I think it is terribly rude to put crap like that on a web site, but
maybe that's just me and noone else cares.




___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] what how ...

2006-06-09 Thread Michael Scheidell

 -Original Message-
 From: Pablo L. Arturi [mailto:[EMAIL PROTECTED] 
 Sent: Friday, June 09, 2006 7:43 PM
 To: Michael Scheidell
 Subject: Re: [AMaViS-user] what how ...
 
 
  Is that 280.000 NON-SPAM? What is the number INCLUDING SPAM?
 (maybe 400.000? About 86% spam ratio?)
 
  I think that 280.000 includes everything, spam and good 
 messages. The
 amount of accounts are 17.000 (16 messages per account, per day?).
 
  You looking at doing this on one big box or multiple servers? What 
  about load balancing? Failover? High availability?
 
 Hi Michael. I was just thinking that would be better at 
 least 2 machines, just in case one is down to have another MX 
 box and avoid loosing mails.
Usually three.
One FE server (postfix, DNS, mysql, DCC flood server if you use DCC.
Anything over 100,000 per day they want you to run your own flood
server.

Two load balancing servers with amavis/sa/clamav. Postfix transport to
send to a dns name (let dns round robin the BE servers)

Or, you could do it with one big raid enabled, multi-dual core xeon with
redundant power supplies.


 
  (ps, don't anyone go to www.bairesweb.com  some unknown strange 
  vbscript
 tries to pop something up.
  Firefox blocked it)
  I think it is terribly rude to put crap like that on a web 
 site, but 
  maybe that's just me and noone else cares.
 
 
 Hmm :) no, it's not a popup, I hate them too. It's probably a 
 javascript to load a mini-applet for my customer service chat.
 
 Thank you
 Pablo
 
 


___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] what how ...

2006-06-09 Thread Pablo L. Arturi
 Usually three.
 One FE server (postfix, DNS, mysql, DCC flood server if you use DCC.
 Anything over 100,000 per day they want you to run your own flood
 server.
 
 Two load balancing servers with amavis/sa/clamav. Postfix transport to
 send to a dns name (let dns round robin the BE servers)
 
 Or, you could do it with one big raid enabled, multi-dual core xeon with
 redundant power supplies.

What do you think of having this:

mx1 --- mx2
   |
   Mail Server

mx1 and 2 will have amavis/clamd/SA/postfix and will forward all incoming
mail to Mail Server and having both mx dns records with the same priority
should function as a loadbalancing ...

am I wrong ?

any idea of what kind of hardware should I use for both server?

Thanks again,
Pablo



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] what how ...

2006-06-09 Thread Michael Scheidell

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf 
 Of Pablo L. Arturi
 Sent: Friday, June 09, 2006 7:57 PM
 To: Michael Scheidell; amavis-user@lists.sourceforge.net
 Subject: Re: [AMaViS-user] what how ...
 
 
 mx1 --- mx2
|
Mail Server
 

I guess I forgot about the mail server.

If you have a loadbalancing set with mysql on two systems, you have the
replication issue.

I would do:

FE (main mx record to the world) postfix/DNS/DCC,mysql, 'special' dns
entry for postfix/transport should round robbin SA1 and SA2
SA1  SA2
Mail Server

(remember, SA with lots of rules takes the most time, clamav will also)

 mx1 and 2 will have amavis/clamd/SA/postfix and will forward 
 all incoming mail to Mail Server and having both mx dns 
 records with the same priority should function as a loadbalancing ...
 

This is high end, should keep transit latencies down to 14 to 20 seconds
per email.
FE 3GHZ Dual core, mirroring, put /var/spool on separate spindles,
redundant power supplies, MX weight 10
Pretend it's a normal postfix server, depending on distro, 2/4GB ram, 
(remember, its running your only copy of mysql, and will have your
quarantined files via NFS or SQL)
Keep an updated copy of your userlist on FE to block dictionary
attacks.  Use tarpit :-)
Maybe use postfix mime-header rules to block certain attachments MS
should never have allowed in email.
(.bat, cmd, scr, pif).  I would do a very heavy reliance on postfix to
block as much as you can.

SA1 and SA2
3GHZ dual core, I don't know if I would go for mirror and redundant ps,
since you have two of them.
Maybe 2/4GB reach.

Mail server
Don't know, what do you have now?

What is latencies?
The above should reduce the load by 90%.



___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/