RE: Content filter question, based upon auth'ed or not

7 msg	Postfix 2.2.5 on latest Solaris 9 x86
5 msg	Postfix Relay, and Pop-before-smtp
12 msg	Newb Question
13 msg	Best defense against this?
1 msg	undelivered mail problem - SOLVED
4 msg	Legal local-part
3 msg	virtual_alias_domains with mysql: 'User unknown...
6 msg	Submission port (587): howto to use differente ...
5 msg	When does smtpd_reject_unlisted_recipient kick in?
4 msg	Postfix 'falling back' on sasldb? I don't want ...
3 msg	Nested access maps (I think ;))
3 msg	Suppression of encoding bad header function in ...
4 msg	RE: Catchall ??
3 msg	problem with .forward files + forwarding loops
5 msg	Postfix Strange Behaviours

Content filter question, based upon auth'ed or not
\ Gary W. Smith (20 Sep 2007)
. \ Jesse Long (21 Sep 2007)
. . \ Duane Hill (21 Sep 2007)
. . . \ mouss (21 Sep 2007)
. . . . \ Gary W. Smith (23 Sep 2007)
. \ Duane Hill (21 Sep 2007)
. \ Gary W. Smith (21 Sep 2007)

28 msg	Mail stuck in active queue for loooong time
11 msg	How to stop a user from changing the 'From:' he...
10 msg	[Semi-OT] blocked port 465, anywhere?
7 msg	chroot problems on Nexenta (OpenSolaris)

Subject:	RE: Content filter question, based upon auth'ed or not
Group:	Postfix-users
From:	Gary W. Smith
Date:	23 Sep 2007

> >> Hi Gary,
> >>
> >> The policy delegation protocol informs the policy service of the
> >> sasl_username, and policy servers may respond with "filter
> >> transport:destination" overriding the default content filter. So,
> maybe a
> >> small custom policy service that sets a special filter for unauthed
> >> emails
> >> would suffice?
> >
> > I never thought about using a policy. Depending on if you needed
> > detailed information within the headers and/or body, using the
policy
> > would be faster as specific information is passed to the policy
> server
> > (not the entire message).
> >
>
>
> there is no need for a policy service:
>
> smtpd_recipient_restrictions =
> check_client_access pcre:/etc/postfix/filter_auth
> permit_sasl_authenticated
> check_client_access pcre:/etc/postfix/filter_mynetworks
> permit_mynetworks
> check_client_access pcre:/etc/postfix/filter_default
> ...
>
> == filter_auth:
> /./ FILTER scan1:blah
>
> == filter_mynetworks:
> /./ FILTER scan2:bleh
>
> == filter_default:
> /./ FILTER scan3:bloh
>

Mouss,

This is real useful. I'll play around with it and see what I can come
up with.

Thanks,

Gary