OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Update: Postfix blacklist by MX or NS host

From: Alexander Skwar (listenalexander.skwar.name)
Date: Fri Sep 19 2003 - 11:44:23 CDT


Wietse Venema wrote:

> The check_{helo,sender,recipient}_{ns,mx}_access maptype:mapname
> restriction applies the specified access table to the NS or MX
> hosts of the host/domain given in HELO, EHLO, MAIL FROM or RCPT TO
> commands.

I've applied the patch to 2.0.14 on Debian Woody. How do I check if the
patch works?

In /etc/postfix/main.cf I've got:

        smtpd_mumble_restrictions =3D
             reject_unknown_sender_domain
             check_sender_mx_access hash:/etc/postfix/mx_access
             check_helo_ns_access hash:/etc/postfix/mx_access
             check_sender_mx_access cidr:/etc/postfix/mx_access.cidr

/etc/postfix/mx_access is:

spammer.haven.tld reject spammer mx host
64.94.110.11 reject mail server in verisign wild-card domain

Now I thought that I should get a 451 if I try to send a mail and use a
"HELO this-is-verisign.net", shouldn't I?

# host this-is-verisign.net
this-is-verisign.net has address 64.94.110.11

If I should - why don't I? Because I'm perfectly able to send a mail
when I used the above hostname as the HELO greeting.

Thanks a lot,

Alexander Skwar
--
-> Keine Kopien senden - ich lese die Listen in denen ich schreibe! <-
  -> Do not CC me on replies - I read the list in which I write! <-