OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Disabling UCE controls based on recipient domain?
From: Sweth Chandramouli (sweth+postfixsweth.net)
Date: Wed Dec 20 2000 - 16:48:04 CST

        I've got postfix set up as my local MTA, and recently
started implementing some more advanced UCE controls such as
reject_unknown_client to prevent relaying for machines that aren't
reverse-mappable in DNS. All seems to be working fine, except that
I now discover that some of the domains for which this machine
acts as a secondary MX reguarly receive mails from clients that
aren't reverse-mappable. Is there any way to specify that the
reject_unknown_client constraint should only be applied if the
recipient domain _isn't_ in one of those domains for which I'm
secondary?
        It _seems_ as though the ability to set up a map check
whose result could itself be another UCE rule would let me handle this,
but the logical conclusion of that type of structure is that, to be
completely flexible, I'd have to only have one restriction in my
main.cf--an smtpd_recipient_restrictions statement that called a map
check, and use nested calls to other map checks to work my way
_backwards_ through the SMTP conversation until the last check is
smtpd_client_restrictions. Is that possible, and even if it is, isn't
there a less convoluted way to accomplish this?

        TIA,

        Sweth. 

-- 
Sweth Chandramouli ; <svcsweth.net>
  • application/pgp-signature attachment: stored