Skipping checks on a whole domain

[Glenn Steen]

2008/10/20 Stef Morrell <stef at aoc-uk.com>:
>> -----Original Message-----
>> From: Mark Sapiro
>> Sent: 20 October 2008 17:05
>> To: MailScanner discussion
>> Subject: Re: Skipping checks on a whole domain
>>
>> On Mon, Oct 20, 2008 at 12:03:47PM +0530, ram wrote:
>> > On Sun, 2008-10-19 at 16:53 +0200, Test wrote:
>> > > Hmm, i seemed to have missed this part in the MailScanner.conf.
>> > >
>> > > But what i would actually like to have is that the
>> relayed mail goes
>> > > completely around mailscanner (so no logging, mailwatch etc.)
>> > >
>> > > Must be some option in postfix to get this to work ?
>> >
>> >
>> As I understand the OP's situation, this won't work. I think
>> he is acting as the incoming MX for his friend's domain
>> because the friend's provider blocks incoming port 25. There
>> probably is a way to do this in postfix, but it isn't by
>> changing the port the mail arrives at.
>
> I've tried this at some length and header_checks are a doozy in postfix
> as every header line is checked, so it's going to match /^Received/ at
> some stage and be put into HOLD for MailScanner to process.
>
> You might be able to achieve something useful in header_checks with
>
> if !/^Received: <from the address to relay direct>/
>        /^Received:/ HOLD
> endif
>
> But only if you can guarantee only one Received header will appear,
> otherwise any other Received headers will end up sending the email to
> the HOLD queue.
>
Um, didn't you participate in the thread Hugo had on selective hold
(through access...)? IIUC, that should be able to do what is needed.
Anyone interested should look up "Selective HOLD" in the ml archives:-).

> Alternatively, you might be able to do something with the FILTER action
> in header_checks, putting your filtering rule before the general HOLDing
> rule. I'm unsure quite how that will work though, RTM I guess.

... too tired to think this through properly, but ... I'm not sure it'd work.

> Stef

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se