OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Wietse Venema (wietse_at_porcupine.org)
Date: Mon Aug 26 2002 - 12:12:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Victor.Duchovnimorganstanley.com:
    > On Mon, 26 Aug 2002, Michael Tokarev wrote:
    >
    > > Caution. This is not "defer", but ... errm... "dunno if reject"
    > > maybe. Should not be confused with "deferred queue" or something
    > > like. Having "hold" here, it's too easy to be confused.
    > >
    >
    > It is defer_if_reject in the sense of returning a 4XX code to the sender
    > if subsequent restrictions reject the message.
    >
    > The defer_if_accept is likewise return a 4XX if subsequent restrictions
    > accept the message (or fall of the end with DUNNO).

    I implemented both of these before the weekend and expect to turn
    it on today on my own system. I do not expect to share this code
    with anyone until it has been running for a while.

    Quoting from the preliminary release notes:

        More sophisticated handling of UCE-related DNS lookup errors.
        These cause Postfix to not give up so easily, so that some
        deliveries will not have to be deferred after all. This affects
        the following restrictions:

        - permit_mx_backup (defer the request if any subsequent
        restriction would cause the request to be rejected, accept the
        request if any subsequent restriction would cause the request
        to be accepted);

        - reject_unknown_hostname, reject_unknown_sender_domain and
        reject_unknown_recipient_domain (defer the request if any
        subsequent restriction would cause the request to be accepted,
        reject the request if any subsequent restriction would cause
        the request to be rejected).

    By now I really want to finish that TCP map so I can do sender
    address verification (hold off mail until an off-line process has
    verified that mail for the sender address would be accepted).

            Wietse
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users