[Postfixbuch-users] Frage zu submission in Kombination mit AMaViS...

[Klaus Tachtler]

Hallo Liste,

ich will per Einlieferung/Relay über submission, auch AMaViS  
einbinden. Ich habe es auch geschafft, bin mir aber nicht sicher ob  
das alles so RICHTIG ist?

Was habe ich gemacht -->

/etc/postfix/master.cf (relevanter Ausschnitt):
...
submission inet n       -       n       -       -       smtpd
   -o smtpd_tls_security_level=encrypt
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
   -o milter_macro_daemon_name=ORIGINATING
   -o content_filter=lmtp:[192.168.0.70]:10026
...

/etc/amavsid.conf (relevanter Ausschnitt):
...
# it is up to MTA to re-route mail from authenticated roaming users or
# from internal hosts to a dedicated TCP port (such as 10026) for filtering
$interface_policy{'10026'} = 'ORIGINATING';

$policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our users
   originating => 1,  # declare that mail was submitted by our smtp client
   allow_disclaimers => 1,  # enables disclaimer insertion if available
   # notify administrator of locally originating malware
   # Tachtler
   # default: virus_admin_maps => ["virusalert\@$mydomain"],
   virus_admin_maps => ["mailfilter\@$mydomain"],
   # Tachtler
   # default: spam_admin_maps  => ["virusalert\@$mydomain"],
   spam_admin_maps  => ["mailfilter\@$mydomain"],
   warnbadhsender   => 1,
   # forward to a smtpd service providing DKIM signing service
   # Tachtler
   # default: forward_method => 'smtp:[127.0.0.1]:10027',
   # forward_method => 'smtp:[127.0.0.1]:10027',
   # force MTA conversion to 7-bit (e.g. before DKIM signing)
   smtpd_discard_ehlo_keywords => ['8BITMIME'],
   bypass_banned_checks_maps => [1],  # allow sending any file names and types
   terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
};
...

DKIM und Disclaimer (via alterMIME in AMaViS) habe ich "global" in  
AMaViS definiert.

Ist das so der beste Weg?

Danke, für Eure Meinungen schon in voraus!

Grüße
Klaus.





--

------------------------------------------
e-Mail  : klaus at tachtler.net
Homepage: http://www.tachtler.net
DokuWiki: http://www.dokuwiki.tachtler.net
------------------------------------------