On Fri, 2008-08-29 at 09:39 -1000, Camron W. Fox wrote: > Noel Jones wrote: > > Camron W. Fox wrote: > >> Alle, > >> > >> We would like to filter all internal email so that it bypasses > >> SpamAssassin. We have set up per_client_filters using: > >> > >> smtpd_client_restrictions = > >> check_client_access cidr:/etc/postfix/per_client_filter > >> > >> == per_client_filter: > >> 0.0.0.0/0 FILTER spamassassin: > >> 10.0.0.0/8 FILTER dummy: > >> ... > >> > > > > Note that order matters in a cidr: table. First match wins; everything > > matches 0.0.0.0/0. Put the catchall last, more specific entries earlier. > > http://www.postfix.org/cidr_table.5.html > > > >> The spamassasin filter works fine, but how do we create a dummy > >> filter that just does a bypass of all the internal emails? > >> > > > > Why send them through a filter at all if you don't want them filtered? > > Use DUNNO as the table result. > > > > 10.0.0.0/8 DUNNO > > 0.0.0.0/0 FILTER... > > > Noel, > > So this will accomplish what we want? > > 10.0.0.0/0 DUNNO > 0.0.0.0/0 FILTER spamassassin:
Maybe not exactly. We have a similar setup. The problem here is, that mails handed out to spamassassin (in our case its amavisd-new) is reinjected by amavisd-new to postfix via localhost:10025. All mails bypassing amavisd-new must be "manually" reinjected to port 10025 to accomplish address rewriting etc. (all the stuff that is done AFTER content filtering). So your setup would look like this: 10.0.0.0/0 FILTER smtp:[127.0.0.1]:10025 0.0.0.0/0 FILTER spamassassin: Regards -stefan-
