Re: [gentoo-user] Postfix as Mail-Queuing-Server

[kashani <kashani-list@badapple.net>]

Schöffmann Matthias wrote:
> Hi!
> 
> I have the following problem: I want a postfix-server between my 
> mailserver (exchange) and my smarthost (postfix) witch relays all 
> mails without attachments and put all mails with attachments in a 
> queue to preview the mails (per web interface?) and deliver this ones
>  only when i manually allow them.
> 
> Any ideas? Maybee with a "antispam-solution" whicht quarantines all 
> mails with attachments?
> 
> Greets from austria

I think it's much simpler to do:

Internet <--> Postfix/Spam/SmartHost/etc <--> Exchange

I'd look into setting up clamav and amavis-new which would pretty much
automate the whole process. I also do some header filtering to keep
obvious spam attachments from hitting the sometimes CPU intensive virus 
and spam filtering processes.

/etc/postfix/mime_header_checks.regexp
/^\s*Content-(Disposition|Type).*name\s*=\s*"?(.+\.(ad[ep]|asd|ba[st]|c[ho]m|cmd|cpl|crt|dbx|dll|exe|hlp|hta|in[fs]|isp|js|jse|lnk|md[etw]|ms[cipt]|nws|ocx|ops|pcd|pi|pif|prf|reg|scf|scr|sct|sh[bms]|swf|uue|vb|vb[esx]|vxd|wab|ws[cfh]))"?\s*$/ 
REJECT Files attached to emails that contain or end in "$3" are 
prohibited on this server as they may contain viruses. The file named 
"$2" was rejected.

/etc/postfix/main.cf
# attachement filtering
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp

You may want to add or remove extentions based on what works for you and 
your users.

kashani
-- 
gentoo-user@gentoo.org mailing list