OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: maps_rbl timeouts
From: Brad Knowles (blkskynet.be)
Date: Mon Mar 06 2000 - 06:03:53 CST

At 12:49 PM +0100 2000/3/6, Francesc Guasch wrote:

> Can I configure something some way so this doesn't happen ?

        Try changing the order in smtpd_client_restrictions. Instead of
something like this:

smtpd_client_restrictions = dbm:/etc/postfix/access, reject_maps_rbl,
permit_mynetworks, reject_unknown_client

        Try something like this:

smtpd_client_restrictions = dbm:/etc/postfix/access,
permit_mynetworks, reject_maps_rbl, reject_unknown_client

        This only gets you into trouble if you want to refuse connections
from local IP addresses that have managed to find their way into one
of the black lists (especially ORBS), perhaps because if this client
is allowed to relay through your machine, then your machine might
also wind up on one of the black lists.

        This is typically more of a problem for ISPs that may have
customers that run their own mail servers, and which may not be
secure against being abused as open relays. It it typically less of
a problem for companies that are running their own mail server,
especially where firewall restrictions do not allow local clients to
receive or transmit SMTP outside of the network. 

-- 
  These are my opinions and should not be taken as official Skynet policy
=========================================================================
Brad Knowles, <blkskynet.be>       Sys. Arch., Mail/News/FTP/Proxy Admin

Note: No Microsoft programs were used in the creation or distribution of
this message. If you are using a Microsoft program to view this message,
be forewarned that I am not responsible for any harm you may encounter as
a result.

See <http://i-want-a-website.com/about-microsoft/twelve-step.html> for
details.