|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Ralf Hildebrandt (news-list.postfix.users
innominate.de)Date: Wed Sep 05 2001 - 04:24:15 CDT
On 5 Sep 2001 03:25:47 +0200, Chip Paswater <turk182
chipware.net> wrote:
>> a) Put all restrictions into smtpd_recipient_restrictions:
>>
>> smtpd_recipient_restrictions =
>> check_sender_access hash:/etc/postfix/relay_domains.map,
>> reject_unknown_sender_domain,
>> permit_mynetworks,
>> check_relay_domains
>>
>> and relay_domains.map would return not OK or REJECT, but the name of a
>> restriction class, e.g. foobar:
>
> How do the ordering of these options work? Maybee I'm dumb, but I've read
> the documentation over and over again, I can't seem to figure it out.
The restrictions are evaluated in the order they're specified. They
can return OK, REJECT (in these cases the evaluation ENDS) or DUNNO
(in which the next restriction is evaluated).
Example above:
check_sender_access hash:/etc/postfix/relay_domains.map
ist checked. Depending if an entry in
hash:/etc/postfix/relay_domains.map matches the envelope sender, the
corresponding RHS value is returned (OK, REJECT, "554 Pissoff", or the
name of a restriction_class).
Let's say nothing matches ->
reject_unknown_sender_domain is evaluated.
Let's say the sender_domain is valid ->
permit_mynetworks is evaluated. If the client is in $mynetworks, OK is
returned and the evaluation ends, if not ->
check_relay_domains is evaluated:
It's a special rstriction which returns EITHER OK or REJECT, so
nothing behind check_relay_domains will EVER be evaluted.
-- ralf.hildebrandtinnominate.com innominate AG Technical Consultant Don't be afraid of what you see - Diplom-Informatiker be afraid of what you don't see! tel: +49.(0)7000.POSTFIX fax: +49.(0)30.308806-77
- To unsubscribe, send mail to majordomo
postfix.org with content (not subject): unsubscribe postfix-users
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]