From: Warrick FitzGerald (no email)
Date: Sat Oct 01 2005 - 14:34:54 EDT
Patrick Ben Koetter wrote:
>* Andreas Winkelmann <>:
>
>
>>>in restrictions
>>>
>>>...
>>>permit_sasl_authenticated
>>>check_recipient_access hash:refuse_A
>>>
>>>with refuse_A containing
>>>
>>>@DomainA.com REJECT
>>>
>>>
>>But without the "@"?
>>
>>(http://www.postfix.org/access.5.html)
>>
>>And you should allow Mails for "postmaster" without Authentification.
>>
>>
>
>You MUST (as in RFC) allow mails for postmaster@ and abuse@ if the server is
>publicly referenced or your server will sooner or later be blacklisted on
>rfc-ignorant.org.
>
>p at rick
>
>
>
>
>
>>--
>> Andreas
>>
>>
>
>
>
Thanks for the help on this guys, but it does not seem to be working for
some reason. This is what my smtpd_client_restrictions now looks like :
smtpd_client_restrictions = permit_mynetworks, permit_auth_destination,
permit_sasl_authenticated, check_recipient_access
hash:/etc/postfix/access, reject
[root at livemail1 postfix]# postmap -q domaina.com access
REJECT
I tested this by telneting directly to the machine from an untrusted
network and then injecting a mail for domaina.com
Any ideas on what I'm doing wrong here?
Thanks
Warrick
|
|
|