interface_policy and postfix

Alex mysqlstudent at gmail.com
Mon Dec 28 00:27:32 CET 2015


Hi,

I'm using amavisd-new-2.10.1 and postfix-3.0.3 on fc22. I have a bunch
of IPs that I need to effectively whitelist to allow all mail to skip
being processed by amavisd.

I'm trying to understand how to use the %interface_policy capability,
and whether that's a better option than to just add the IPs to a
$policy_bank.

I've seen examples of the interface_policy for amavis, but what
changes in postfix are necessary to make this work?

I currently have amavis set up in postfix like this:

master.cf:
smtp-amavis unix    -       -       n       -       -   smtp
    -o smtp_data_done_timeout=1200
    -o smtp_send_xforward_command=yes
    -o disable_dns_lookups=yes
    -o max_use=40

127.0.0.1:10025 inet n    -       n       -       7     smtpd
    -o content_filter=
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=permit_mynetworks,reject
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_data_restrictions=reject_unauth_pipelining
    -o smtpd_end_of_data_restrictions=
    -o smtpd_restriction_classes=
    -o mynetworks=127.0.0.0/8
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
    -o local_header_rewrite_clients=

main.cf:
content_filter = smtp-amavis:[127.0.0.1]:10024

amavisd is configured:
$inet_socket_port = 10024;   # listen on this local TCP port(s)

This basically sends all mail to amavis on port 10024, with amavis
reinjecting mail back to postfix on port 10025. How do I create an
additional port where only mail matching the IPs in my whitelist are
sent? Or bypassed completely?

Thanks,
Alex


More information about the amavis-users mailing list