Postfix - nezabera header_checks ani body_checks

[Tomáš Bittner]

Takhle to mam nastavene v 2.06 a chodi to    je potreba si akorat zmenit  domena.cz za svoji a melo by to chodit


command_directory=/usr/sbin
daemon_directory=/usr/lib/postfix
mydestination = $myhostname, localhost.$mydomain, $mydomain
alias_maps=hash:/etc/postfix/aliases
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail -Y -a $DOMAIN
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandrake Linux)
delay_warning_time = 4
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.0.6/samples
readme_directory = /usr/share/doc/postfix-2.0.6/README_FILES
alias_database=hash:/etc/postfix/aliases
myhostname = mail.domena.cz
mydomain = domena.cz
myorigin = domena.cz
luser_relay = admin
relay_domains = domena.cz
local_recipient_maps=
mynetworks = 192.168.1.0/24
smtpd_sender_restrictions = permit_mynetworks,reject_invalid_hostname,reject_unknown_sender_domain
message_size_limit = 40960000
header_checks = pcre:/etc/postfix/header_checks
body_checks = pcre:/etc/postfix/body_checks


S pozdravem,

                       Tomáš Bittner

e-mail: tbittner na cerny-ps.cz

Pavel ?erný - po?íta?ové služby
      http://www.cerny-ps.cz
Tel. 566 625 268

>>> "linux-cz" <linux-cz na cps.sk> 13.06.03 11:36 >>>
v tej 2.0.9 mam akurat parameter
debug_peer_level = 2

a myslim, ze mi moc nepomoze :(

s tym postmap header_check a body_checks som ratal, ze to netreba
robit, ale uz fakt som nevedel, kde mam chybu, skusil som proste vsetko.

Co mam skusit dalej ?  Dokumentacia na www.postfix.org je dost chaba :(

Maros

----- Original Message ----- 
From: "Kovar Jan" <Kovar_J na tese.cz>
To: <sendmail na linux.cz>
Sent: Thursday, June 12, 2003 2:45 PM
Subject: RE: Postfix - nezabera header_checks ani body_checks


> Hello.
> Postmap na header_checks a body_checks je zbytecny. Muzete klidne smazat
> sobory header_checks.db a body_checks.db, ktere se vytvorily v
> /etc/postfix/. Zkuste si v master.cf zapnout vetsi logovani. Myslim, ze
> staci na radku cleanup dat za prikaz cleanup jeste -v
> cleanup   unix  -       -       y       -       0       cleanup -v
> Bude vam to cpat do logu spoustu blbosti, ale dozvite se, jestli vubec
> prohlizel ten mail.
> Jinak jsem mel podobny pripad a jelikoz v regexp jsem nula, tak jsem
pouzil
> nastaveni od jinych lidi.
> http://www.hispalinux.es/~data/postfix/ 
> Myslim, ze od prvnich trech mi to nefungovalo.
>
> Nakonec to u me vypada takhle:
> /^[^\t\x20]*begin
>
(.*)\.(exe|bat|com|lnk|asd|shb|vb|wsf|wsh|pif|scr|chm|hta|shs|vbs|vbe|js|jse
> )("?)[\t\x20]*$/ REJECT Invalid attachment. If you want to send file
> - use zip. Nepovolena priloha. Pokud chcete poslat soubor, pouzijte zip.
>
/^[^\t\x20]*Content-(Type|Disposition):(.*)((file)?)name=(.*)\.(exe|bat|com|
> lnk|asd|shb|vb|wsf|pif|scr|chm|hta|shs|vbs|vbe|js|jse)/ REJECT Invalid
> attachment. If you want to send file - use zip. Nepovolena priloha. Pokud
> chcete poslat soubor, pouzijte zip.
>
/^[^\t\x20]*((file)?)name=(.*)\.(exe|bat|com|lnk|asd|shb|vb|wsf|pif|scr|chm|
> hta|shs|vbs|vbe|js|jse)("?)[\t\x20]*$/ REJECT Invalid attachment. If you
> want to send file - use zip. Nepovolena priloha. Pokud chcete poslat
soubor,
> pouzijte zip.
>
> TNX
>
> > -----Original Message-----
> > From: linux-cz [mailto:linux-cz na cps.sk] 
> > Sent: Thursday, June 12, 2003 2:28 PM
> > To: sendmail na linux.cz 
> > Subject: Postfix - nezabera header_checks ani body_checks
> >
> >
> > Zdravim
> >
> > Mam postfix 2.0.9, v main.cf mam:
> >
> > header_checks = regexp:/etc/postfix/header_checks
> > body_checks = regexp:/etc/postfix/body_checks
> >
> > header_checks:
> > /^Subject:\s+Re: Your password/ REJECT Sorry, text in subject
> > typical for Internet worm
> >
> > body_checks:
> > /^begin \d\d\d .*\.(vbe|vbs|exe|com|jb|bat|pif|scr|lnk)/
> > REJECT Message content rejected; we do not accept executable
> > attachme nts.
> > /^Content-(Disposition|Type)\:.*name="?.*\.(vbe|vbs|exe|com|jb
> > |bat|pif|scr|l
> > nk)"?/ REJECT Message content rejected; we do not
> > accept executable attachments.
> > /^\s*(file)?name="?.*\.(vbe|vbs|exe|com|bat|pif|scr|lnk)"?/
> > REJECT Message content rejected; we do not accept executable
> > attac hments.
> >
> > pustil som postmap na header_checks aj na body_checks, aj ked
> > som si neni isty, ci treba ? reloadol som postfix, ale
> > bohuzial sa mi horeuvedene neuplatni, tzn. mozem kludne
> > posielat prilohy, aj subject moze byt 'Re: Your password'...
> >
> > Co robim zle ? Alebo co mam este kde nastavit ?
> >
> > Dik za pomoc !
> >
> > Maros
> >
>