From: Kirk Strauser (no email)
Date: Fri Mar 04 2005 - 11:47:05 EST
On Friday 04 March 2005 09:55, Victor Duchovni wrote:
> The smtpd_helo_restrictions are not final, they are followed by
> smtpd_sender_restrictions and smtpd_recipient_restrictions.
That was my understanding. Thanks for confirming this - I had a minor panic
attack when I read Rob's mail.
> If an unsafe "check_helo_access" is used too early in the
> recipient restrictions, you are toast.
The block in question reads like:
smtpd_helo_restrictions =
# Allow anyone on our network, by IP address.
permit_mynetworks,
# Now, block anyone *not* on our network who claims to be.
check_helo_access hash:/usr/local/etc/postfix/helo_access,
# Syntax checks
reject_non_fqdn_hostname,
reject_invalid_hostname,
# Allow anyone making it so far.
permit
-- Kirk Strauser
|
|
|