-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gary V wrote:
> I would think you could eliminate the need for this by
having Postfix
> reject all oversize messages before they enter the
system. They page shows:
>
> A >= B > C >= D
>
> I don't agree that this is "the only relationship
that makes sense". I
> think this would be more appropriate:
>
> A < B > C >= D
>
> This would hopefully eliminate rejecting messages after
they have been
> sent to Maia.
That depends on your oversize policy. If your policy with
regard to
oversized items is to reject them, then yes, you'd be wiser
to just set
your MTA's size limit to max_allowed_packet (A = B), knowing
that the
MTA will not be relaying anything larger than you can
handle.
On the other hand, some admins would prefer to accept
oversized items,
even if it means they won't get scanned and will be blindly
passed on
for delivery. The theory is that spam and malware tend to
be relatively
small to maximize distribution bandwidth, so size becomes
something of a
crude filter--particularly when size limits are set quite
high.
This 'accept' scenario occurs when A > B.
The recommended A >= B relationship, then, comes from the
'accept' (A >
B) and 'reject' (A = B) scenarios. It can be
misconfigured,
naturally--setting A > B in combination with a 'reject'
policy would
result in oversized items generating a bounce DSN, which may
not be
desirable, and of course setting A = B with an 'accept'
policy is
pointless since no oversized mail will ever reach
amavisd-maia to get
accepted.
One alternative (in future versions) may be to remove the
'reject'
policy altogether as an option and use only a default
'accept' policy,
such that all rejections must be done upstream at the MTA,
and anything
that gets past the MTA must either be processed by
amavisd-maia (size <=
C) or passed through without being scanned or stored (size
> C).
- --
Robert LeBlanc <rjl renaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFG3HK0GmqOER2NHewRAo4+AJ0cp9sRkkIeMyR+haCDfyw9iH9EGACg
rewx
Wio9Vs9FUrjyJacB0OiWWSE=
=zxmc
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-users renaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users
|