From: Ralf Hildebrandt (no email)
Date: Mon Apr 01 2002 - 13:23:10 EST
On Mon, Apr 01, 2002 at 08:52:08AM -0800, Bill Landry wrote:
> smtpd_client_restrictions =
> smtpd_helo_restrictions =
> smtpd_sender_restrictions =
> smtpd_recipient_restrictions =
> reject_unauth_pipelining,
> permit_mynetworks,
> reject_unauth_destination,
> check_recipient_access hash:/etc/postfix/recipient-rules,
> check_sender_access hash:/etc/postfix/sender-rules,
> check_helo_access hash:/etc/postfix/hostname-rules,
> reject_invalid_hostname,
> reject_unknown_sender_domain,
> reject_unknown_recipient_domain,
> reject_maps_rbl,
> permit
> ==========
>
> When I add a sender's e-mail address in the form:
>
> OK
>
> to my sender-rules file that was previously being block by an RBL check, it
> then gets delivered successfully to the receipent because it bypasses my
> sender RBL checks. I thought this was why Ralf and others recommended
> adding all UCE restrictions under smtpd_recipient_restrictions.
Exactly.
a) You know the order they're applied in
b) You know that /etc/postfix/recipient-rules
/etc/postfix/sender-rules /etc/postfix/hostname-rules can safely list
OK or RELAY because relaychecks are done BEFORE.
-- Ralf Hildebrandt (Im Auftrag des Referat V A) Charite Campus Virchow-Klinikum Tel. +49 (0)30-450 570-155 Referat V A - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 Why you can't find your system administrators: (S)he's in the bathroom... masterbating -- - To unsubscribe, send mail to with content (not subject): unsubscribe postfix-users
|
|
|