From: Kirk Strauser (kirkstrauser.com)
Date: Fri Mar 04 2005 - 10:47:05 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Friday 04 March 2005 09:55, Victor Duchovni wrote:

> The smtpd_helo_restrictions are not final, they are followed by
> smtpd_sender_restrictions and smtpd_recipient_restrictions.

That was my understanding. Thanks for confirming this - I had a minor panic
attack when I read Rob's mail.

> If an unsafe "check_helo_access" is used too early in the
> recipient restrictions, you are toast.

The block in question reads like:

smtpd_helo_restrictions =
        # Allow anyone on our network, by IP address.
        permit_mynetworks,
        # Now, block anyone *not* on our network who claims to be.
        check_helo_access hash:/usr/local/etc/postfix/helo_access,
        # Syntax checks
        reject_non_fqdn_hostname,
        reject_invalid_hostname,
        # Allow anyone making it so far.
        permit

--
Kirk Strauser

-----BEGIN PGP SIGNATURE-----

iD8DBQBCKJEM5sRg+Y0CpvERAqa3AKCdJIkr2I5cGAzoVVOBVkck088s/wCfYOee
68Mx2ZMcmsnJyhCsDdN6Nmw=
=qj0s
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]