On Nov 28, 2011 6:48 PM, "Mișu Moldovan" <du...@gnome.org> wrote: > > On Mon, Nov 28, 2011 at 13:28, Hannes Erven <h...@gmx.at> wrote: > > Am 2011-11-28 11:25, schrieb Mișu Moldovan: > >>> Mailscanner or amavisd-new? > >> > >> The above solutions only scan mails AFTER accepting them. > > > > This is not true -- I have several amavisd-new setups with postfix that > > filter before queuing the message. > > Messages identified as Spam, Virus or messages with disallowed > > attachments (.exe,.vbs,...) are rejected by the MTA. > > > > See: http://www.postfix.org/SMTPD_PROXY_README.html > > Thank you for clarifying it, I wasn't aware that amavsid-new can do > that. However, at http://www.amavis.org/#faq-mta I read: > > The Postfix Before-Queue Content Filter setup, also known as > smtpd_proxy setup, is not a supported or recommended setup with > amavisd-new, which is not a transparent SMTP proxy by design. See > caveats in README_FILES/SMTPD_PROXY_README > > Unfortunately, I couldn't find the referenced README in the sources. > Can you tell us more in this regard? >
I think it's Postfix's README: http://www.postfix.org/SMTPD_PROXY_README.html That said, the above page explicitly warns about the possibility of server deadlock. Since this is meant to be the corporate mail gateway, I prefer the after-queue methods. Rgds,