OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: wrong ip blocking?
From: Lutz Jaenicke (Lutz.Jaenickeaet.TU-Cottbus.DE)
Date: Tue Jul 04 2000 - 08:25:57 CDT


On Tue, Jul 04, 2000 at 02:59:29PM +0200, Mipam wrote:
> On Tue, Jul 04, 2000 at 02:45:28PM +0200, furio ercolessi wrote:
> > On Tue, Jul 04, 2000 at 02:17:37PM +0200, Mipam wrote:
> > > Hi,
> > >
> > > I am trying to block certain ip's this way:
> > >
> > > in main.cf:
> > > smtpd_recipient_restrcitions = hash:/etc/postfix/client_access, bla bla bla
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >
> > smtpd_recipient_restrictions !
> >
>
> Got i right in the main.cf but wrong in the mail.
> However, still no success, also not after putting
> ip.to.block.now 550 Get lost! in the client_access without quotes.
> Any suggestions?

If you supply only the "access" table without special command in
smtpd_recipient_restrictions, the recipient is checked against the
the access table.

If you want to check the client, you must ask postfix to do especially this
(my setup):
smtpd_recipient_restrictions =
        regexp:/etc/postfix/regexp_access,
        check_relay_ccerts,
        reject_maps_rbl,
        check_client_access dbm:/etc/postfix/access,
        reject_unknown_sender_domain,
        reject_unauth_pipelining,
        check_relay_domains

Best regards,
        Lutz

-- 
Lutz Jaenicke                             Lutz.Jaenickeaet.TU-Cottbus.DE
BTU Cottbus               http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153