Hi list, I want particular senders to bypass scanning.
here's what I have done. in main.cf , I have added the line check_sender_access hash:/etc/postfix/amavis_senderbypass pls see below # Sender restrictions: smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/amavis_senderbypass reject_non_fqdn_sender, reject_unknown_sender_domain, permit contents of /etc/postfix/amavis_senderbypass #sen...@example.net FILTER smtp-amavis:[127.0.0.1]:10026 #sen...@example.org FILTER smtp-amavis:[127.0.0.1]:10026 #gmail.com FILTER smtp-amavis:[127.0.0.1]:10026 mygm...@gmail.com FILTER smtp-amavis:[127.0.0.1]:10026 postmap /etc/postfix/amavis_senderbypass then, In amavisd.conf: #$inet_socket_port = 10024; # listen on this local TCP port(s) $inet_socket_port = [10024,10026]; # listen on multiple TCP ports $interface_policy{'10026'} = 'SENDERBYPASS'; $policy_bank{'SENDERBYPASS'} = { #bypass_spam_checks_maps => [[qw( .recipientdomain.com)]], #bypass_banned_checks_maps => [[qw( .recipientdomain.com)]], #bypass_header_checks_maps => [[qw( .recipientdomain.com)]], spam_lovers_maps => [[qw( .recipientdomain.com)]], bypass_spam_checks_maps => [[qw( .recipientdomain.com)]], banned_files_lovers_maps => [[qw( .recipientdomain.com)]], bypass_banned_checks_maps => [[qw( .recipientdomain.com)]], bad_header_lovers_maps => [[qw( .recipientdomain.com)]], bypass_header_checks_maps => [[qw( .recipientdomain.com)]], }; /etc/init.d/amavisd restart When I send mails mails from mygm...@gmail.com, sender is bypassed. It works as expected. But, I have an question to discuss. which option is better and safer? option1 bypass_spam_checks_maps => [[qw( .recipientdomain.com)]], bypass_banned_checks_maps => [[qw( .recipientdomain.com)]], bypass_header_checks_maps => [[qw( .recipientdomain.com)]], option 2 spam_lovers_maps => [[qw( .recipientdomain.com)]], bypass_spam_checks_maps => [[qw( .recipientdomain.com)]], banned_files_lovers_maps => [[qw( .recipientdomain.com)]], bypass_banned_checks_maps => [[qw( .recipientdomain.com)]], bad_header_lovers_maps => [[qw( .recipientdomain.com)]], bypass_header_checks_maps => [[qw( .recipientdomain.com)]], I have seen in mailing lists that having both spam_lovers_maps and bypass_spam_checks_maps are ok, when mails are addressed to multiple recipients. here are some links. http://amavis-users.amavis.narkive.com/53G9WY8o/bypass-spam-check-for-domain I'm not sure I understand your question. Here is an axample. A message is addressed to ***@example.com and ***@example.org (both of which are domains you are responsible for). @bypass_spam_checks_maps = ( ["example.com"] ); This message will still be scanned because ***@example.org is not included in @bypass_spam_checks_maps. ***@example.com is in the map, but in this case this recipient may not receive a copy of the message (assuming it is spam). @bypass_spam_checks_maps does not guarantee delivery of spam. To guarantee delivery of a message that has been scanned by spamassassin and subsequently marked as spam, you want to also include the recipient in @spam_lovers_maps. another link https://sourceforge.net/p/amavis/mailman/amavis-user/thread/20090723230510.ga26...@tandon.net/ bypass all scanning for one domain. @spam_lovers_maps = ( ['sampledomain.org'] ); @bypass_spam_checks_maps = ( ['sampledomain.org'] ); or if you want to also cover subdomains: @spam_lovers_maps = ( ['.sampledomain.org'] ); @bypass_spam_checks_maps = ( ['.sampledomain.org'] ); Waiting for your views. -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts