Re: restriction class

From: Harvey Smith (no email)
Date: Sat Dec 03 2005 - 04:50:56 EST

  • Next message: William Van Hefner: "RE: reject_unverified_recipient 450 error message exposes VPN addreses"

    On Fri, Dec 02, 2005 at 08:50:56PM -0800, Justin Zygmont wrote:
    > On Fri, 2 Dec 2005, Harvey Smith wrote:
    >
    > >On Fri, Dec 02, 2005 at 06:24:42PM -0800, Justin Zygmont wrote:
    > >>
    > >>doesn't seem to work, nothing will send that way. Did you try it like
    > >>this before?
    > >>
    > >
    > >I thought I had a good handle on restriction classes and I use several
    > >of them in my set-up but the answer is no, I have not tried to do what
    > >you are trying to do. In fact I just set up a test and was unable to
    > >get even the example as originally stated to work. In my case all the
    > >test emails were sent to the external relays and none were stopped.
    > >
    > >I apologize, apparently I'm not as with-it as I thought.
    >
    > hmm, i'm suprised too. Well thanks for trying to help anyways, I didn;t
    > think i was going to get any replies at all.
    Ok I have been enlightened as to why all my email were been sent, mail
    sent via the sendmail(1) command don't go throuth the
    smtpd_*_restriction.

    I just re-did my tests submitting the email via smtp and every is now
    working as I expected.

    Basically I have now:

    in main.cf:

      smtpd_restriction_classes = local_only

      local_only =
            check_recipient_access hash:/etc/postfix/local_domains,
            reject

      smtpd_recipient_restrictions =
            check_sender_access hash:/etc/postfix/sender_access,
            ...

    And in /etc/postfix/sender_access:

         DUNNO
      buskers.org local_only

    And in /etc/local_domains

      buskers.org OK

    I'm using DUNNO in /etc/postfix/sender_access as sender addresses are
    easy to forge and I want to continue checking later
    smtpd_recipient_restrictions, since this machine accepts mail from the
    internet I don't want any spammer who forges to be
    able to relay email anywhere.

    Anyway was able to email to external hosts and
     couldn't.

    So there is something else in your set-up causing your issues. If you
    send me more info on your set-up (relavant log file lines and output
    of postconf -n) maybe I'll notice what it could be. (and maybe not ;-)

    --
    Harvey
    

  • Next message: William Van Hefner: "RE: reject_unverified_recipient 450 error message exposes VPN addreses"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD