Re: [exim] How to disable spamassassin for outgoing messages…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Heiko Schlittermann
Date:  
À: exim-users
Sujet: Re: [exim] How to disable spamassassin for outgoing messages?
Hi,
pencho kuncho <mkp_71@???> (Do 17 Mär 2016 15:10:52 CET):
> Hi,
> How can i disable spamassassin for outgoing messages? I'll post my acl for spamassassin:
> domainlist local_domains = domain.com
> acl_check_data:
> warn    message   = X-Spam_score: $spam_score\n\                                  X-Spam_score_int: $spam_score_int\n\+                                  X-Spam_bar: $spam_bar                  spam = mail:true
> warn    message   = X-Spam_report: $spam_report           condition = ${if <{$message_size}{100k}{1}{0}}
>                  spam = mail:true
>  
> I read that i should put "hosts = !localhost :" before spamassassin acl , but without success. All mails are scanned. :(


What is "outgoing", what is "incoming"?
Let's think about "outgoing" as "not for my domains" or as "submitted by
known (authenticated) users".

I suppose your configuration is close to the default. DATA ACL works
for incoming SMTP connections. Having "hosts = !localhost" matches all
messages that come from a host that is not the local host. In your case
not very helpful, as I suppose that all messages are sent from any other
but your local host.

Mostly matching on the list of the local domains is a good first
approach, or considering messages from authorized connections as
"outgoing".

The "not my domains" approach doesn't help in the DATA ACL, as the
message can have a mixture of local and non local recipients. So the
originator of the message is left … we can't trust the sender, but we
can trust the sending IP (probably), we can trust authenticated
connections.

    acl_check_data:


        accept authenticated = *
        accept hosts = +trusted_hosts


        warn   spam = …


    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- 
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -