Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hi to the Linux community. I'm coming from a Windows Server background so have mercy.

I'm attempting to whitelist some domains and although I know this isn't the best way of doing so its just a one off for a couple of domains so I thought it would be the quickest way of doing so. Current setup:

Amavis is used to pass emails off the ClamAV and SpamAssasin, currently I make changes in /etc/amavis/conf.d/50-user, as this will overide other settings.

Have created a whitelist file that looks like this:

.domaintowhitelist.com
.domain2towhitelist.com

In the 50-user config file:

Have tried variants like this:

read_hash(\%whitelist_sender, '/etc/amavis/whitelist');
read_hash(\%virus_lovers, '/etc/amavis/whitelist');

And restarting amavis after making those changes. Am I going about this the wrong way? Any help is appreciated.

share|improve this question
add comment

2 Answers 2

I never used a setup an external file. When I had to implement a whitelist, i simply used one of the form listed here:

http://www.akadia.com/services/postfix_amavisd.html#Globally%20Sender%20Whitelists%20and%20Blacklists

and especially this one:
@whitelist_sender_maps = (['.example.org', '.example.net']);

share|improve this answer
    
Thanks for the suggestion. I have applied that line to my 50-user config file and restarted amavis but tried to send my mailbox anotehr 'virus' and exe in a zip file and get the BANNED bounce back message. Is there any way to check if my sending domain is being whitelisted? Thanks –  pigeon Jun 16 '10 at 8:52
    
As stated here ijs.si/software/amavisd/amavisd-new-docs.html#wblist : "It should be emphasized that whitelisting (and blacklisting) only affects spam checks. It has no influence on other checks such as virus, banned or header checks. Infected mail from whitelisted sender would still be blocked if our policy is to block viruses." If you want to bypass everything, go and check policy banks: ijs.si/software/amavisd/amavisd-new-docs.html#pbanks –  Pier Jun 16 '10 at 9:51
add comment

I do whitelisting at the MTA level (in my case postfix) rather than at the amavisd level. In my postfix/main.cf file, I have:

header_checks=pcre:/etc/postfix/whitelist.pcre

Inside whitelist.pcre, I have the following syntax:

user@example.com FILTER  SMTP:[127.0.0.1]:10025

where SMTP:[127.0.0.1]:10025 is the transport in master.cf that filtered mail is reinjected into the postfix system. My reasoning to do that is if certain messages are not to be checked for anything, I don't want amavisd to touch it.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.