-------- Original-Nachricht --------
> Datum: Thu, 29 Jan 2009 19:44:53 +0100
> Von: mouss <mo...@ml.netoyen.net>
> An: postfix-users@postfix.org
> Betreff: Re: Calling smtpd restriction/filter from within master.cf
> Steve a écrit :
> > -------- Original-Nachricht --------
> >> Datum: Thu, 29 Jan 2009 17:14:08 +0100
> >> Von: mouss <mo...@ml.netoyen.net>
> > [snip]
> >> PS If you are using this to do per recipient filtering, don't forget
> >> that only one filter will run. so if a message is sent to multiple
> >> recipients, the last FILTER statement will set the filter. if one of
> the
> >> recipients is configured to skip filtering, all it takes a spammer is
> >> to add this as the last recipient...
> >>
> > Thanks for reminding me about that. Is that btw as well true if I would
> limit destination concurrency to 1 for that filter?
> >
>
> no. but this would not be very "nice"...
>
> if your goal is to skip dspam for some users, then why not do this in
> dspam itself (opt-in or other....)
>
Who was writing about DSPAM? Me not. Anyway... let's take DSPAM as an example:
Postfix -{content filter Amavis in LMTP mode} -> {Amavis doing his stuff
reinject back to Postfix over SMTP on another port (for example 10025)} ->
{Postfix on port 10025 has content filter entry to use DSPAM over LMTP} ->
{DSPAM filtering and then reinjecting back to Postfix listening on another port
(for example 10026) with SMTP} -> delivery
How would now one let all inbound/outbound mail go over Amavis but let only
outbound mail go over DSPAM? The valid users are all in a MySQL table and
that's the reason I was thinking to use a recipient access map to separate the
recipients and use that info to know what is inbound and what is outbound.
> if you really want "true" per recipient filtering, then use two postfix
> instances. in the before-the-filter instance, you can then use
> transport_maps (instead of content_filter and FILTER) to select the
> filter. you need two instances because transport_maps are global in an
> instance.
>
I think I know what you mean. I will try to follow that advice and look if I
can solve the issue. If I get into problems, then I will ask again.
// Steve
--
Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen:
http://www.gmx.net/de/go/multimessenger
