postfix, backup mx host + spam and virus scanning enabled

[rdeussen]

Hi all,

In ISPConfig we have the option to specify a external mailserver. For this "external mailserver" domain, ISPconfig is not relaying any e-mail by default.

I've edited postfix:

relay_domains = hash:/etc/postfix/relay_domains
relay_recipient_maps = hash:/etc/postfix/relay_recipients

and put the users there who are known at the primary mailserver in the relay_recipients file. This way e-mail gets relayed at the backup mx, and delivered at the primary host as soon as this host becomes available.

But...

there is no spam and e-mail scanning done this way. Does somebody know where to look?

Thnx
Ralph

[rdeussen]

Ofcourse i also have:

transport_maps = hash:/etc/postfix/transport


so postfix knows the primary server...instead of dns lookup...

[falko]

Originally Posted by rdeussen

there is no spam and e-mail scanning done this way.

Yes, because this is invoked by procmail, but it isn't called if the emails don't arrive at the users' homedirs. You must set up Postfix to use amavisd instead which then passes the emails back to Postfix after scanning.

[rdeussen]

Is there a howto regarding ispconfig, postfix and amavisd?

And is there any interaction between the ispconfig web interface and this postfix / amavisd solution?

I'm also thinking about performance issue, is every e-mail send or received by the system scanned by amavisd? Or can i limit this to the backup domains?

[falko]

Originally Posted by rdeussen

Is there a howto regarding ispconfig, postfix and amavisd?

These howtos are about Postfix and amavisd_new: http://flakshack.com/anti-spam/wiki/index.php
http://www200.pair.com/mecham/spam/
http://gentoo-wiki.com/HOWTO_Spam_Fi...ostfix,_Amavis

Basically you must install your distribution's amavisd_new package, and then you configure Postfix and amavisd_new.

Originally Posted by rdeussen

And is there any interaction between the ispconfig web interface and this postfix / amavisd solution?

No.

Originally Posted by rdeussen

I'm also thinking about performance issue, is every e-mail send or received by the system scanned by amavisd? Or can i limit this to the backup domains?

You can create whitelists with amavisd_new.

[rdeussen]

I've configured;

postfix main.cf, master.cf, transport, relay_domains, relay_recipients.

amavisd is configured using the 50-user file (debian..)

But now it seems every e-mail is scanned with amavis...and again after the procmail invokes? Perhaps this is unneeded load, but for the meantime it looks ok. I'm trying out the whitelist stuff to see if i can limit this to the back domains. I'll keep you updated.

It would be awesome if i could use a tool like mailwatch (sourceforge) Anybody any experience with this?

[falko]

Originally Posted by rdeussen

But now it seems every e-mail is scanned with amavis...and again after the procmail invokes?

Then you did something wrong. The mail must go to Postfix, then to amavisd, which delviers it back to Postfix after scanning. Have a look here: http://www.howtoforge.com/virtual_po...ota_courier_p3
But please don't follow the whole tutorial as it configures Postfix for virtual mailboxes which is not compatible with ISPConfig!