interface_policy and postfix
Alex
mysqlstudent at gmail.com
Mon Dec 28 00:27:32 CET 2015
Hi,
I'm using amavisd-new-2.10.1 and postfix-3.0.3 on fc22. I have a bunch
of IPs that I need to effectively whitelist to allow all mail to skip
being processed by amavisd.
I'm trying to understand how to use the %interface_policy capability,
and whether that's a better option than to just add the IPs to a
$policy_bank.
I've seen examples of the interface_policy for amavis, but what
changes in postfix are necessary to make this work?
I currently have amavis set up in postfix like this:
master.cf:
smtp-amavis unix - - n - - smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=40
127.0.0.1:10025 inet n - n - 7 smtpd
-o content_filter=
-o smtpd_delay_reject=no
-o smtpd_client_restrictions=permit_mynetworks,reject
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
-o smtpd_restriction_classes=
-o mynetworks=127.0.0.0/8
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
-o local_header_rewrite_clients=
main.cf:
content_filter = smtp-amavis:[127.0.0.1]:10024
amavisd is configured:
$inet_socket_port = 10024; # listen on this local TCP port(s)
This basically sends all mail to amavis on port 10024, with amavis
reinjecting mail back to postfix on port 10025. How do I create an
additional port where only mail matching the IPs in my whitelist are
sent? Or bypassed completely?
Thanks,
Alex
More information about the amavis-users
mailing list