Solution: Bypass mailscanner for authenticated smtp users.

[Aaron Greengrass]

Indeed.

Noel Butler sent me this option as an alternative, and it's exactly what 
i was looking for (i'm using it instead).  See below.

/When I used mailscanner I solved this easily by -

1/ Only accept users sending mail on submission port/ /
2/ leave header checks alone
3/  in master.cf

submission inet n       -       n       -       -       smtpd/ /
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o 
smtpd_recipient_restrictions=reject_unknown_recipient_domain,permit_mynetworks,permit_sasl_authenticated,reject
   -o smtpd_data_restrictions=
   -o receive_override_options=no_milters,no_header_body_checks
   -o content_filter=


(the override_options line is the critical one here)/ /

/
On 5/5/2012 9:31 AM, Kai Schaetzl wrote:
> Aaron Greengrass wrote on Thu, 03 May 2012 11:09:50 -0700:
>
>>  From what I can see, that header only successfully matches when the
>> most recent hop was my local MX
> Why would you think so? The regexp is matched against all Received
> headers.
> You are not the only one using this option. You match a quite unspecific
> pattern. I just did a search over my mailing list folders that hold about
> 30.000 messages and got nearly 1.500 matches. You at least want to make
> this unique to your organization.
>
> Kai
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120506/b3d02504/attachment.html