John Jolet wrote:I have a question about that....is it documented anywhere how to get clamd integrated into postfix? all i could find was instructions on doing it via amavisd-new, so that's the road i've started down, but I'd prefer to do it natively via clamd, if possible.AFAIK this is not yet possible. Currently you need to define content_filter in postfix, which exchanges messages via any transport defined in master.cf. Candidates for that include the "pipe" and "smtp" transport (the various amavisd's use smtp), but there's nothing there where you can plug clam[d]scan directly.
Second thing is postfix doesn't yet support content filtering at smtp level (e.g. reject virii or spam directly via "550 xxxxx" SMTP reply), it spools every message to disk before handing it out to a defined content_filter. The upcoming Postfix 2.1 will feature smtp level scanning, but will still need some interface application.
I plan to write one, to get rid of amavisd-new in the first place. But my time is limited, so I can't promise any release date. I'll post an announcement here when it's ready, and hopefully it will also appear in clam's contrib/ directory then.
Amavisd-new works just fine as an smtpd_proxy_filter with current postfix experimental snapshots, and will work with postfix 2.1. You get to 550 spam and malware during SMTP, and still get to keep the quarantine copy for analysis. There are scalability problems when using any filter as a proxy, so high volume sites should stick with the traditional content_filter method.
Bennett Todd's SMTPPROX framework would be a good starting place if you want to write something lightweight of your own. http://bent.latency.net/smtpprox/index.html
While if feels good to 550 spammers and malware during SMTP, you don't save any bandwidth because you must receive the whole mail before rejecting based on content. Reject as much as you can based on client and envelope information before the mail body is sent.
--
Noel Jones
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
