Re: Allowing some Unverified Domains

From: Ralf Hildebrandt (no email)
Date: Mon Jul 01 2002 - 11:20:33 EDT


On Mon, Jul 01, 2002 at 11:15:46AM -0400, Larry Hansford wrote:

> smtpd_recipient_restrictions =
> reject_non_fqdn_sender,
> reject_non_fqdn_recipient,
> reject_unknown_sender_domain,
> reject_unknown_recipient_domain,
> permit_mynetworks,
> check_client_access hash:/etc/postfix/pop-before-smtp,
> check_sender_access hash:/etc/postfix/access_list,
> check_recipient_access hash:/etc/postfix/access_list,
> reject_non_fqdn_hostname,
> reject_unknown_client,
> check_relay_domains
>
> This is blocking a lot of spam and unwanted mail, but there are two sites
> that we want to receive mail from that are also being blocked -- I
> contacted their sys admins to get them to fix their systems, and they said
> it would take them a while to determine the problem and fix it.
>
> These two sites are being rejected with a "554 Client host rejected: cannot
> find your hostname" error.
>
> Can I add a add a line in main.cf, above the other checks, for:
>
> check_sender_access regexp:/etc/postfix/access.regexp
>
> and then put in the access.regexp file:
>
> /gbod.com/ OK
> /ecomc.com/ OK

No. What for?

Simply put
gbod.com check_relay_domains
ecomc.com check_relay_domains

into hash:/etc/postfix/access_list

Or better still, change your config to:

> smtpd_recipient_restrictions =
> reject_non_fqdn_sender,
> reject_non_fqdn_recipient,
> reject_unknown_sender_domain,
> reject_unknown_recipient_domain,
> permit_mynetworks,
    reject_unauth_destination,
> check_client_access hash:/etc/postfix/pop-before-smtp,
> check_sender_access hash:/etc/postfix/access_list,
> check_recipient_access hash:/etc/postfix/access_list,
> reject_non_fqdn_hostname,
> reject_unknown_client,
    permit

and just put:

gbod.com OK
ecomc.com OK

into hash:/etc/postfix/access_list

-- 
Ralf Hildebrandt (Im Auftrag des Referat V A)   
Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
When the government outlaws cryptography, bayl pevzvanyf jvyy unir
cevinpl. 
-
To unsubscribe, send mail to  with content
(not subject): unsubscribe postfix-users







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD