Re: postfix & f-prot antivirus

[Francisco Acosta <chesco@xxxxxxxxxxx>]

Magnus Bäck wrote:

> Two instances are generally not required for content filtering.
>
>  
Ok.

> I do not understand the problem.
>
>  
And sure my english dosn't help.  :|

                  --------------------------
public ip    gateway.idea.com.py
                  --------------------------
                                 |
                                 |
                                 |
                  -------------------------  
private ip     internal.idea.com.py
                   -------------------------

First, i configure postfix in gateway, as if will receive all emails, 
for the domain, no mail is redirected to internal. In this situation, 
if  i send a virus to any user in gateway, the  message arrive, but 
instead of the file with virus, a notice about removing the virus is 
attached to the message.
Then i configure in transport

   idea.com.py smtp:[ip-of-internal]

All emails get to internal.idea.com.py, but, no virus is cached, user in 
internal.idea.com.py, receive the email with the file with virus attached.
This are the options amavisd-new have for master.cf

smtp-amavis unix -      -       n     -       2  smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes

127.0.0.1:10025 inet n  -       y/n     -       -  smtpd
   -o content_filter=
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o mynetworks=127.0.0.0/8
   -o strict_rfc821_envelopes=yes
   -o smtpd_error_sleep_time=0
   -o smtpd_soft_error_limit=1001
   -o smtpd_hard_error_limit=1000

And in main.cf

   content_filter=smtp-amavis:[127.0.0.1]:10024


/**/

Before using amavis-new, i follow the directions of scan-mail which come 
with f-prot.
First add this line to main.cf:

   content_filter = smtp:[127.0.0.1]:10025

Then add these 3 entries to master.cf:

   scan unix - - n - 10 smtp

   localhost:10026 inet n - n - 10 smtpd

   -o content_filter=

   -o local_recipient_maps=

   -o relay_recipient_maps=

   -o myhostname=localhost

   -o smtpd_helo_restrictions=

   -o smtpd_client_restrictions=

   -o smtpd_sender_restrictions=

   -o smtpd_recipient_restrictions=permit_mynetworks,reject

   -o mynetworks=127.0.0.0/8

   localhost:10025 inet n n n - 10 spawn

       user=nobody argv=/usr/local/f-prot/tools/scan-mail.pl -postfix 
127.0.0.1:10026

And the situation was the same. If tranport is not configured, works, 
but if mail is redirected to internal.idea.com.py, no virus is stopped.
Thanks for all the answers!.