OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Protocol error with Hotmail server
From: Rask Ingemann Lambertsen (rask-postfixkampsax.k-net.dk)
Date: Fri Jun 09 2000 - 04:31:14 CDT

Den 09-Jun-00 01:22:55 skrev Bennett Todd fĝlgende om "Re: Protocol error with Hotmail server":

>2000-06-07-11:04:10 Rask Ingemann Lambertsen:
>> In the next few months, I will implement at database listing
>> domains for which one or more MX'es have this problem and Postfix
>> will be configured to reject mail from those domains. Essentially
>> it will be an RBL-style database, automatic retesting etc.,
>> although until someone implements a DNS-based database engine for
>> Postfix, I'll have to use something else (probably the mysql one,
>> suggestions welcome, preferably something that works across a
>> network).

>I'm not sure what you mean by this.

   Simple enough: From double bounces, I've found out that zitech.dk doesn't
accept bounces ("550 Bogus mail from"). I will use something like this in
main.cf

smtpd_sender_restrictions = ... ,
        check_sender_access hash:/somewhere/bogusmailfrom.db ,
        ...

with this in /somewhere/bogusmailfrom:

zitech.dk 4XX One or more zitech.dk MX'es violate RFC 821 and RFC 1123 5.2.9

   And here is a potential problem: How can I make it match zitech.dk
without matching any subdomains of zitech.dk?

>Postfix has generalized code to interact with RBL-style databases;
>specifically, as described in the Postfix Configuration -
>UCE Controls section, if smtpd_client_restrictions includes
>"reject_maps_rbl", connections will be rejected from any site listed
>in any of the RBL-style domains listed in maps_rbl_domains.

   Unless I'm mistaken, I can't use the "reject_maps_rbl" restriction
because it tries to match the IP address of the SMTP client. I need
something that tries to match the domain of the envelope sender address.

[Dan's dnscache]

   No way. I noticed the bit in "fine print" where it says it doesn't
support TCP. Even if qmail was the only piece of software performing DNS
lookups on the whole Internet, I wouldn't find that acceptable. At least
this time, Dan documents the defect. I was appalled to find a mail server
that doesn't support DNS, and now there's a DNS server that doesn't support
DNS. Please forgive me for not finding this a brilliant idea.

Regards,

/ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻTŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ\
| Rask Ingemann Lambertsen | E-mail: mailto:raskkampsax.k-net.dk |
| Registered Phase5 developer | WWW: http://www.gbar.dtu.dk/~c948374/ |
| A4000, 896 kkeys/s (RC5-64) | "ThrustMe" on XPilot, ARCnet and IRC |
| Press <Esc> to exit. Press <Esc> twice to save and exit. |