OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ralf Hildebrandt (news-list.postfix.usersinnominate.de)
Date: Wed Sep 05 2001 - 04:24:15 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 5 Sep 2001 03:25:47 +0200, Chip Paswater <turk182chipware.net> wrote:

    >> a) Put all restrictions into smtpd_recipient_restrictions:
    >>
    >> smtpd_recipient_restrictions =
    >> check_sender_access hash:/etc/postfix/relay_domains.map,
    >> reject_unknown_sender_domain,
    >> permit_mynetworks,
    >> check_relay_domains
    >>
    >> and relay_domains.map would return not OK or REJECT, but the name of a
    >> restriction class, e.g. foobar:
    >
    > How do the ordering of these options work? Maybee I'm dumb, but I've read
    > the documentation over and over again, I can't seem to figure it out.

    The restrictions are evaluated in the order they're specified. They
    can return OK, REJECT (in these cases the evaluation ENDS) or DUNNO
    (in which the next restriction is evaluated).

    Example above:

    check_sender_access hash:/etc/postfix/relay_domains.map
    ist checked. Depending if an entry in
    hash:/etc/postfix/relay_domains.map matches the envelope sender, the
    corresponding RHS value is returned (OK, REJECT, "554 Pissoff", or the
    name of a restriction_class).
    Let's say nothing matches ->
    reject_unknown_sender_domain is evaluated.
    Let's say the sender_domain is valid ->
    permit_mynetworks is evaluated. If the client is in $mynetworks, OK is
    returned and the evaluation ends, if not ->
    check_relay_domains is evaluated:
    It's a special rstriction which returns EITHER OK or REJECT, so
    nothing behind check_relay_domains will EVER be evaluted.

    -- 
    ralf.hildebrandtinnominate.com                            innominate AG
    Technical Consultant                   Don't be afraid of what you see -
    Diplom-Informatiker                     be afraid of what you don't see!
    tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users