OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: multiple argument options in master.cf

From: Chris (chrisessentkabel.com)
Date: Tue Mar 02 2004 - 02:29:40 CST


On Mon, 2004-03-01 at 14:44, Victor wrote:
> Any of the spaces can be a comma, but better yet use a variable, for
> example:
>
> 127.0.0.1:10025 ... smtpd
> -o smtpd_recipient_restrictions=$local_10025_rcpt_restrictions
>
> main.cf:
> local_10025_rcpt_restrictions =
> ...

One step beyond:
Would it be possible to use variables as a result from a ldap query?
For example in main.cf I could have defined two variables:
        rcpt_rbl_checks_1 = reject_rbl_client dnsbl.njabl.org
        rcpt_rbl_checks_2 = reject_rbl_client dnsbl.njabl.org,
        reject_rbl_client list.dsbl.org
        
I've created an ldaplookup:
        rbl_server_host = localhost
        rbl_server_port = 389
        rbl_search_base = o=mailserver,dc=domain,dc=com
        rbl_query_filter = (&(mail=%s)(accountActive=TRUE))
        # rbl_result_attribute = rbl
        rbl_special_result_attribute = rbl
        
And in ldap I've stored:
        dn:
        cn=cvmdomain.com,jvd=domain.com,o=mailserver,dc=domain,dc=com
        maildir: c/v/cvm/
        homeDirectory: /var/spool/postfix/virtual/
        cn: cvmdomain.com
        userlogin: cvm
        objectClass: top
        objectClass: couriermailaccount
        objectClass: mailuser
        objectClass: jammmailaccount
        accountActive: TRUE
        localDelivery: TRUE
        forwardFlag: FALSE
        mail: cvmdomain.com
        rbl: $rcpt_rbl_checks_2
        
To use the above I changed smtpd_recipient_restrictions to:
smtpd_recipient_restrictions =
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_unknown_sender_domain,
        reject_unknown_recipient_domain,
        permit_mynetworks,
        reject_unauth_destination,
        ldap:rbl

Unfortunately I couldn't get this working (neigther with
rbl_result_attribute and rbl_special_result_attribute). Any ideas how to
get this working?

Regards,

Chris