following output from master.cf file.

# Bypass checks for internally generated mail.
pickup    fifo  n       -       n       60      1       pickup
  -o content_filter=
submission inet n       -       n       -       -       smtpd
  -o smtpd_enforce_tls=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
  -o content_filter=smtp-amavis:[127.0.0.1]:10026

smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o content_filter=smtp-amavis:[127.0.0.1]:10026
# Use dovecot deliver program as LDA.

is there's any other file where bypass would be enabled for local users.

Thanks/Pradeep

Yes. even if this commented in master.cf, Mails exceeding size are bounced when sent from outside. however it doesnot work when sent from internal domain to internet.

Hi Zhang

here is part of amavisd.conf

$interface_policy{'10026'} = 'ORIGINATING';

$policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our users
  originating => 1,  # declare that mail was submitted by our smtp client
  allow_disclaimers => 1,  # enables disclaimer insertion if available
  # notify administrator of locally originating malware
  virus_admin_maps => ["root\@$mydomain"],
  spam_admin_maps  => ["root\@$mydomain"],
  warnbadhsender   => 1,
  # forward to a smtpd service providing DKIM signing service
  forward_method => 'smtp:[127.0.0.1]:10027',
  # force MTA conversion to 7-bit (e.g. before DKIM signing)
  smtpd_discard_ehlo_keywords => ['8BITMIME'],
  #bypass_banned_checks_maps => [1],  # allow sending any file names and types
  #bypass_banned_checks_maps => [0],  # allow sending any file names and types
  terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
};

please suggest..

Tested on my VM server, seems Amavisd only check local recipient.

Hey Zhang
Thanks for replying. can we some how fix it, since message size restriction is needed to be checked from internally as well as externally. referred your policyd.sourceforge readme but that may not be possible here as we are using LDAP.

Thanks/Pradeep

Dear Zhang as you mentioned "Amavisd only check local recipient."

can you help me locating file in which it is written to map (rcpt to) here pradeep.h.mishra@gmail.com with an ldap filter, obviously it will not match an entry for an external email id in our ldap.

Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup_ldap, "pradeep.h.mishra@gmail.com" no match
2:09:24 testmx amavis[4647]: (04647-10) lookup_acl(pradeep.h.mishra@gmail.com), no match
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup [local_domains] => undef, "pradeep.h.mishra@gmail.com" does not match
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) query_keys: pradeep.h.mishra@gmail.com, @gmail.com, @.gmail.com, @.com, @.
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup_ldap "pradeep.h.mishra@gmail.com", query keys: "pradeep.h.mishra@gmail.com", "@gmail.com", "@.gmail.com", "@.com", "@.", base: o=domains,dc=pace,dc=org, filter: (&(objectClass=mailUser)(objectClass=amavisAccount)(accountStatus=active)(|(mail=%m)(shadowAddress=%m)))
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) ldap begin_work
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup_ldap: searching base="o=domains,dc=pace,dc=org", scope="sub", filter="(&(objectClass=mailUser)(objectClass=amavisAccount)(accountStatus=active)(|(|(mail=pradeep.h.mishra@gmail.com)(mail=@gmail.com)(mail=@.gmail.com)(mail=@.com)(mail=@.))(|(shadowAddress=pradeep.h.mishra@gmail.com)(shadowAddress=@gmail.com)(shadowAddress=@.gmail.com)(shadowAddress=@.com)(shadowAddress=@.))))"
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup_ldap, "pradeep.h.mishra@gmail.com" no match
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup_ldap_attr(amavismessagesizelimit), "pradeep.h.mishra@gmail.com" no matching records
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) lookup [message_size_limit] => undef, "pradeep.h.mishra@gmail.com" does not match
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) ESMTP> 250 2.1.5 Recipient <pradeep.h.mishra@gmail.com> OK
Mar 10 12:09:24 testmx amavis[4647]: (04647-10) switch_to_client_time 480 s, smtp response sent

BR/Pradeep

Dear Zhang
output from amavisd.conf
# Integrate Amavisd-new with OpenLDAP.
$enable_ldap    = 1;    # 1 -> enable, 0 -> disable.
$default_ldap   = {
    hostname        => "127.0.0.1",
    port            => 389,
    version         => 3,
    tls             => 0,
    timeout         => 120,
    base            => "o=domains,dc=pac,dc=org",
    scope           => "sub",
    query_filter    => "(&(objectClass=mailUser)(objectClass=amavisAccount)(accountStatus=active)(|(mail=%m)(shadowAddress=%m)))",
    bind_dn         => "cn=vmail,dc=pac,dc=org",
    bind_password   => "3152929980230715747882225613",
};

1;  # insure a defined return

I want to set incoming as well as outgoing message size limit per user basis.
say for an example - Managers will have 10MB message size limit for sending as well as recieving. whereas some user may be allowed 3MB message size limit for sending as well receiving.
Currently the way it is working is only for receiving, when I set it in amavisMessageSizeLimit.

Please help how do we set the message size limit per user to make it to work for bidirectional.

Best Regards
Pradeep MIshra

Thanks Zhang. No I am not using policyd, as the _message_size limit need me to populate data in mysql policyd db. However I thought it would be great if this could have been possible with amavisMessageSizeLimit attribut of LDAP.

Is this bidirectional features are available in IREDADMIN PRO ? as this is required feature for my company.

BR/Pradeep Mishra