From: mouss (no email)
Date: Wed Apr 23 2008 - 20:16:00 EDT
Carlos Williams wrote:
> On Wed, Apr 23, 2008 at 3:15 PM, Brian Evans <> wrote:
>
>
>> You may wish to consider check_sender_access and check_recipient_access
>> tables in your smtpd_sender_restrictions and smtpd_recipient_restrictions
>> respectively. (after reject_unauth_destination of course)
>>
>>
> I entered the following into my /etc/postfix/access file:
>
> carlwill.com REJECT
>
> Then ran postmap /etc/postfix/access
>
> Then postfix reload
>
> I see that my main.cf shows:
>
> smtpd_sender_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> check_sender_access hash:/etc/postfix/access,
> hash:/etc/postfix/sender_restrictions,
>
replace the line above with
check_sender_access hash:/etc/postfix/sender_restrictions
> check_sender_access hash:/etc/postfix/siteoverride,
> reject_unknown_sender_domain,
> reject_non_fqdn_sender,
> permit
>
> However I was still able to send from my email server to carlwill.com.
>
nothing in your setup blocks mail _to_ carlwill.com. you only blocked
mail _from_ carlwill.com. you want
check_recipient_access hash:/etc/postfix/access
BTW, put cheap checks before expensive checks. for example, put
reject_non_fqdn_sender before reject_unknown_sender_domain. the latter
incurs a DNS check.
|
|
|