use strict;

##
## amavisd-new CARNet configuration file
##
## This file contains the config entries that we modify programatically,
## or that we think are better defaults than what Debian provides.
##
## Do not edit this file, put your changes in 50-user instead!
##

# override $mydomain from 05-domain_id and 20-debian_defaults
#
$mydomain = '_CN_DOMAIN_';
@local_domains_acl = ( "$mydomain", ".$mydomain" );

# prettify the return path for notifications a bit in case there's a
# separate person handling these, ie. if the user customizes
# virusalert or spamalert aliases.
#
$mailfrom_notify_admin     = "virusalert\@$mydomain";
$mailfrom_notify_recip     = "virusalert\@$mydomain";
$mailfrom_notify_spamadmin = "spamalert\@$mydomain";
# Keep the default for now
#$virus_admin               = "postmaster\@$mydomain";

# Keep the default for now
# $X_HEADER_TAG = 'X-Virus-Scanned';	# (default: undef)
# $X_HEADER_LINE = "by $myversion (Debian) at $mydomain";

# postfix configuration, postfix' listener socket
#
$forward_method = 'smtp:127.0.0.1:10025';  # where to forward checked mail
$notify_method  = $forward_method;         # where to submit notifications

# postfix setup for notifications, for rationale read the comments about
# LMTP in /usr/share/doc/amavisd-new/README.postfix.gz
#
$final_virus_destiny      = D_DISCARD; # (defaults to D_BOUNCE)
$final_banned_destiny     = D_BOUNCE;  # (defaults to D_BOUNCE)
$final_spam_destiny       = D_BOUNCE;  # (defaults to D_REJECT)
$final_bad_header_destiny = D_PASS;  # (defaults to D_PASS), D_BOUNCE suggested

# read our legacy sender white/blacklists
#
if (-f "$MYHOME/whitelist_sender") {
  read_hash(\%whitelist_sender, "$MYHOME/whitelist_sender");
}
if (-f "$MYHOME/blacklist_sender") {
  read_hash(\%blacklist_sender, "$MYHOME/blacklist_sender");
}

# A small optimization
$first_infected_stops_scan = 1;        # default is false, all scanners are called

# placeholder for AVs we might enable
#
push @av_scanners, (

# ### http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/
# ['Sophos SAVI', \&sophos_savi ],

)

# Always have an AV fallback
#
push @av_scanners_backup = (

# always succeeds (uncomment to consider mail clean if all other scanners fail)
['always-clean', sub {0}],

)

1;  # insure a defined return