[Samba] 2 questions: Can I add another smtp line into master.cf for spam assassin? & spa-policy.pl

[L.P.H. van Belle]

Hai, 

 

I run this on a debian Jessie, postfix 2.11 (all debian packages ) 

 

Route for me is like this. 

-> postscreen -> policy-weight -> policy-spf -> clamsmtp (-> spamassassin) -> user 

 

 

A1.

I have in main.cfg  

 

content_filter = clamsmtp:127.0.0.1:10025 

 

A2.  Yes, you can. This is how i did set up.. ..there maybe improvements on this, but for now works for me. 

 ( i used this site for my example : 

https://wiki.dest-unreachable.net/pages/viewpage.action?pageId=15892484 ) 

 

example master.cf 

 

smtp      inet  n       -       -       -       1       postscreen

smtpd     pass  -       -       -       -       -       smtpd

  -o content_filter=spamassassin

dnsblog   unix  -       -       -       -       0       dnsblog

tlsproxy  unix  -       -       -       -       0       tlsproxy

submission inet n       -       -       -       -       smtpd

  -o syslog_name=postfix/submission

  -o smtpd_tls_security_level=encrypt

  -o smtpd_sasl_auth_enable=yes

  -o content_filter=spamassassin

  -o smtpd_client_restrictions=permit_sasl_authenticated,reject

  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject

  -o milter_macro_daemon_name=ORIGINATING

smtps     inet  n       -       -       -       -       smtpd

  -o syslog_name=postfix/smtps

  -o smtpd_tls_wrappermode=yes

  -o smtpd_sasl_auth_enable=yes

  -o content_filter=spamassassin

  -o smtpd_client_restrictions=permit_sasl_authenticated,reject

  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject

  -o milter_macro_daemon_name=ORIGINATING

 

 

## Postfix SPF Check (package to install : postfix-policyd-spf-perl )

policy-spf  unix  -       n       n       -       0       spawn

  user=policyd-spf argv=/usr/sbin/postfix-policyd-spf-perl

 

## spamassasin (package to install : spamassassin spamd  )

spamassassin unix -     n       n       -       -       pipe

  user=debian-spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}

 

## clamsmtp (package to install : clamsmtp ) 

clamsmtp      unix  -       -       n       -       16      smtp

  -o smtp_data_done_timeout=1200

  -o smtp_send_xforward_command=yes

  -o disable_dns_lookups=yes

 

# reinjection from spamassassin into mailflow after checks

127.0.0.1:10026 inet    n       -       n       -       16       smtpd

  -o content_filter=

  -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks

  -o local_recipient_maps=

  -o relay_recipient_maps=

  -o smtpd_helo_restrictions=

  -o smtpd_client_restrictions=

  -o smtpd_sender_restrictions=

  -o smtpd_recipient_restrictions=permit_mynetworks,reject

  -o mynetworks=127.0.0.0/8

  -o mynetworks_style=host

  -o smtpd_authorized_xforward_hosts=127.0.0.0/8

 

 

 

 


Van: robert at chalmers.com.au [mailto:owner-postfix-users at postfix.org] Namens Robert Chalmers
Verzonden: woensdag 2 december 2015 13:26
Aan: Postfix users
Onderwerp: 2 questions: Can I add another smtp line into master.cf for spam assassin? & spa-policy.pl


 

Q1.


 


Already in my master.cf I have

smtp      inet  n       -       n       -       1       postscreen
#smtp      inet  n       -       n       -       -       smtpd -vv
smtpd     pass  -       -       n       -       -       smtpd
dnsblog   unix  -       -       n       -       0       dnsblog
tlsproxy  unix  -       -       n       -       0       tlsproxy
submission inet n       -       n       -       -       smtpd
 -o smtpd_tls_security_level=encrypt
 -o syslog_name=postfix/submission
 -o smtpd_tls_security_level=encrypt
 -o smtpd_milters=inet:127.0.0.1:8891
smtp      unix  -       -       n 

However, the set up for spamassassin requires another smtp line.

smtp      inet  n       -       -       -       -       smtpd -o content_filter=spamfilter
So are they mutually exclusive ? or can I use it without breaking postfix already.
thanks


 


 


Q2


Is it possible to implement spfpolicy, and greypolicy and if so how?


 


I have tired - but mail then fails.


 


 


 


 


 


 

Robert Chalmers


robert at chalmers.com.au  Quantum Radio: http://tinyurl.com/lwwddov


Mac mini 6.2 - 2012, Intel Core i7,2.3 GHz, Memory:16 GB. El-Capitan 10.11. 2TB Storage made up of - 


Drive 0:HGST HTS721010A9E630. Upper bay. Drive 1:ST1000LM024 HN-M101MBB. Lower Bay