[Postfixbuch-users] Frage zu submission in Kombination mit AMaViS...

[Patrick Ben Koetter]

* Klaus Tachtler <postfixbuch-users at listen.jpberlin.de>:
> Hallo Liste,
> 
> ich will per Einlieferung/Relay über submission, auch AMaViS
> einbinden. Ich habe es auch geschafft, bin mir aber nicht sicher ob
> das alles so RICHTIG ist?
> 
> Was habe ich gemacht -->
> 
> /etc/postfix/master.cf (relevanter Ausschnitt):
> ...
> submission inet n       -       n       -       -       smtpd
>   -o smtpd_tls_security_level=encrypt
>   -o smtpd_sasl_auth_enable=yes
>   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>   -o milter_macro_daemon_name=ORIGINATING
>   -o content_filter=lmtp:[192.168.0.70]:10026

Ich würde pre-queue scannen und smtpd_proxy_filter verwenden.


> /etc/amavsid.conf (relevanter Ausschnitt):
> ...
> # it is up to MTA to re-route mail from authenticated roaming users or
> # from internal hosts to a dedicated TCP port (such as 10026) for filtering
> $interface_policy{'10026'} = 'ORIGINATING';
> 
> $policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our users
>   originating => 1,  # declare that mail was submitted by our smtp client
>   allow_disclaimers => 1,  # enables disclaimer insertion if available
>   # notify administrator of locally originating malware
>   # Tachtler
>   # default: virus_admin_maps => ["virusalert\@$mydomain"],
>   virus_admin_maps => ["mailfilter\@$mydomain"],
>   # Tachtler
>   # default: spam_admin_maps  => ["virusalert\@$mydomain"],
>   spam_admin_maps  => ["mailfilter\@$mydomain"],
>   warnbadhsender   => 1,
>   # forward to a smtpd service providing DKIM signing service
>   # Tachtler
>   # default: forward_method => 'smtp:[127.0.0.1]:10027',
>   # forward_method => 'smtp:[127.0.0.1]:10027',
>   # force MTA conversion to 7-bit (e.g. before DKIM signing)
>   smtpd_discard_ehlo_keywords => ['8BITMIME'],
>   bypass_banned_checks_maps => [1],  # allow sending any file names and types
>   terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
> };
> ...
> 
> DKIM und Disclaimer (via alterMIME in AMaViS) habe ich "global" in
> AMaViS definiert.
> 
> Ist das so der beste Weg?

Sieht IMO gut aus.

p at rick


-- 
[*] sys4 AG
 
http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Joerg Heidrich