OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: poicy_service issues

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Mon Feb 07 2005 - 13:50:48 CST


On Mon, Feb 07, 2005 at 02:45:56PM -0500, Leeman Strout wrote:

> I am attempting to setup greylisting with gld. It works fine if I enter
> a simple check_policy_service ... line in my smtpd_recipient_restrictions.
>
> If I try to use a restriction class, it doesn't work and I can't figure
> out why.
>
> I add to main.cf:
> smtpd_restriction_classes = greylist_policy
> greylist_policy = check_policy_service inet:127.0.0.1:2525
>
> and insert into smtpd_recipient_restrictions:
> check_recipient_access hash:/etc/postfix/grey_enabled
>
> /etc/postfix/grey_enabled:
> some.domain greylist_policy
> userother.domain greylist_policy
>
>
> As I said, placing:
> check_policy_service inet:127.0.0.1:2525
> instead of:
> check_recipient_access hash:/etc/postfix/grey_enabled
>
> in the same location within smtpd_recipient_restrictions works, I just
> don't want gld active for all domains.
>
>
> So what am I missing?
>

Are you testing from a machine in mynetworks?

> smtpd_recipient_restrictions =
        check_recipient_access hash:/etc/postfix/invalid_recip
        permit_mynetworks
        permit_sasl_authenticated
        reject_unauth_destination
        reject_unlisted_recipient
        check_recipient_access hash:/etc/postfix/access
        check_recipient_access hash:/etc/postfix/grey_enabled
        check_sender_access hash:/etc/postfix/deny_my_domain
> smtpd_restriction_classes = greylist_policy

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>