On 2/5/2013 10:22 PM, Doug Sampson wrote: > After implementing the add-on Sanesecurity anti-spam signatures in > response to a recent posting on the mailing list (thanks Noel!), I > am now faced with a small issue. One of my daily Postscreen summary > reports and a Postfix summary report are being flagged by the jurlbl > database and discarded. > > > > Question is- how can I exclude these two reports from the clamsmtpd > scanning? I’ve reviewed the man pages for clamsmtpd and clamav-clamd > and am unable to devise a method to skip these two reports. I also > looked at the Postfix main.cf and again am unable to figure out a > method for doing so. > > > > Has anyone implemented a way of doing so? If it would help matters, > I would be happy to have any email addressed to root be skipped as well. > > > > ~Doug >
Does clamsmtpd not have any whitelisting mechanism? Seems a recipient whitelist would be a pretty basic feature, and the easiest fix for this problem. One option is to not filter "local" mail submitted with the sendmail(1) interface. This is a good option if the machine has no local users. This is what I do on most servers. # master.cf pickup ... pickup -o content_filter= Another option is to use the mini_sendmail or similar program to send your reports to an "unfiltered" port (such as the after-filter reinjection port) instead of through port 25. I do this on a couple machines to send reports around the filters. Instead of typical some_command | mail I use some_command | mini_sendmail -p 10025 -- Noel Jones
