[Postfixbuch-users] Whilelist von Amavis

[karsten.scheidel at piv-drives.com]

> srv1:~# egrep -v '^#|^$|^[[:space:]]+#' /etc/amavisd.conf
> use strict;
> $MYHOME = '/var/lib/amavis';   # (default is '/var/amavis')
> $mydomain = 'online-webservice24.de';      # (no useful default)
> $myhostname = 'srv1.online-webservice24.de';  # fqdn of this host, default
> by uname(3)
> $daemon_user  = 'amavis';   # (no default;  customary: vscan or amavis), -u
> $daemon_group = 'amavis';   # (no default;  customary: vscan or amavis or
> sweep), -g
> $TEMPBASE = $MYHOME;                # (must be set if other config vars use
> is), -T
> $pid_file  = "/var/run/amavis/amavisd.pid";  # (default is
> "$MYHOME/amavisd.pid"), -P
> $lock_file = "/var/run/amavis/amavisd.lock"; # (default is
> "$MYHOME/amavisd.lock"), -L
> $ENV{TMPDIR} = $TEMPBASE;       # wise to set TMPDIR, but not obligatory
> $forward_method = 'smtp:127.0.0.1:10025';  # where to forward checked mail
> $notify_method = $forward_method;            # where to submit 
> notifications
> $max_servers  =  5;   # number of pre-forked children          (default 2),
> -m
> $max_requests = 20;   # retire a child after that many accepts (default 20)
> $child_timeout=5*60;  # abort child if it does not complete its processing
> in
> $smtpd_timeout = 120; # disconnect session if client is idle for too long
> @local_domains_maps = (
>     [".$mydomain" ],
>     read_hash('/etc/postfix/vhcs2/domains')
>     );  # $mydomain and its subdomains
> $unix_socketname = "$MYHOME/amavisd.sock"; # amavis helper protocol socket
> $inet_socket_port = 10024;        # accept SMTP on this local TCP port
> @inet_acl = qw(127.0.0.1 [::1]);  # allow SMTP access only from localhost 
> IP
> $syslog_ident = 'amavis';     # Syslog ident string (defaults to 'amavis')
> $syslog_facility = 'mail';    # Syslog facility as a string
> $syslog_priority = 'debug';   # Syslog base (minimal) priority as a string,
> $LOGFILE = "/var/log/amavis.log";  # (defaults to empty, no log)
> $log_level = 5;                  # (defaults to 0), -d
> $log_recip_templ = undef;  # undef disables by-recipient level-0 log 
> entries
> $bdy_encoding = 'iso-8859-1';  # (default: 'iso-8859-1')
> read_l10n_templates('de_DE', '/etc/amavis');
> $final_virus_destiny      = D_DISCARD;  # (defaults to D_DISCARD)
> $final_banned_destiny     = D_DISCARD;  # (defaults to D_BOUNCE)
> $final_spam_destiny       = D_DISCARD;     # (defaults to D_BOUNCE)
> $final_bad_header_destiny = D_PASS;     # (defaults to D_PASS)
> @viruses_that_fake_sender_maps = (new_RE(
>   qr'nimda|hybris|klez|bugbear|yaha|braid|sobig|fizzer|palyh|peido|holar'i,
>   qr'tanatos|lentin|bridex|mimail|trojan\.dropper|dumaru|parite|spaces'i,
>   qr'dloader|galil|gibe|swen|netwatch|bics|sbrowse|sober|rox|val(hal)?la'i,
>  
> qr'frethem|sircam|be?agle|tanx|mydoom|novarg|shimg|netsky|somefool|moodown'
> i
> ,
>   qr'@mm|@MM',    # mass mailing viruses as labeled by f-prot and uvscan
>   qr'Worm'i,      # worms as labeled by ClamAV, Kaspersky, etc
>  [qr'^(EICAR|Joke\.|Junk\.)'i         => 0],
>  [qr'^(WM97|OF97|W95/CIH-|JS/Fort)'i  => 0],
>   [qr/^/ => 1],   # true by default  (remove or comment-out if undesired)
> ));
> $QUARANTINEDIR = '/var/lib/amavis/virusmails';  # -Q
> $virus_quarantine_method = "bsmtp:$QUARANTINEDIR/virus-%m.bsmtp";
> $spam_quarantine_method  = "bsmtp:$QUARANTINEDIR/spam-%m.bsmtp";
> $virus_quarantine_to  = 'virus-quarantine';    # traditional local
> quarantine
> $bad_header_quarantine_to = 'undef';
> #'bad-header-quarantine'; # local quarantine
> $spam_quarantine_to       = '/var/lib/amavis/spammails/';       # local
> quarantine
> $sa_quarantine_cutoff_level = 13;  # dflt: undef, which disables this
> feature
> $X_HEADER_TAG = 'X-Virus-Scanned';        # (default: 'X-Virus-Scanned')
> $X_HEADER_LINE = "by $myversion (Debian) at $mydomain";
> $undecipherable_subject_tag = '***UNCHECKED*** ';  # undef disables it
> $defang_undecipherable = 1;  # default is false: don't modify mail body
> $defang_spam = 1;  # default is false: don't modify mail body
> $remove_existing_x_scanned_headers= 1; # remove existing X-Virus-Scanned
> $remove_existing_spam_headers  = 1;     # remove existing spam headers if
> $bypass_decode_parts = 1;                # (defaults to false)
> @keep_decoded_original_maps = (new_RE(
>   qr'^MAIL-UNDECIPHERABLE$',  # retain full mail if it contains
> undecipherables
>   qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
> ));
> $banned_filename_re = new_RE(
>   qr'.\.(pif|scr)$'i,                     # banned extensions - rudimentary
> );
> $banned_namepath_re = new_RE(
>   qr'(?# BLOCK COMMON NAME EXENSIONS )
>      ^ (.*\t)? N= [^\t\n]* \. (pif|scr) (\t.*)? $'xmi,
> );
>   $banned_namepath_re = undef;  # to disable new-style
> %banned_rules = (
>   'MYNETS-DEFAULT' => new_RE(   # permissive set of rules for internal 
> hosts

> @whitelist_sender_maps = (
>  read_hash("/etc/amavis/whilelist_sender"),  # a hash table read from a 

whitelist nicht whilelist.


ks


PIV Drives GmbH
Industriestraße 3
61352 Bad Homburg
Tel. +49 (0)6172-102 0 - Fax +49 (0)6172-102 381
www.piv-drives.com   www.brevini.de

Sitz und Registergericht/Place of District Court: Bad Homburg, HRB 7503

Geschäftsführer/Management:
Dipl.-Kfm Michael Kissel
Dipl. Ing. Marcel Offermann
Dr. Jacopo Tozzi