OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Order of permit/reject?

From: /dev/rob0 (rob0gmx.co.uk)
Date: Wed Jun 08 2005 - 10:56:14 CDT


Magnus Bäck wrote:
> On Wed, June 8, 2005 11:40 am, Remco Bressers said:
>
>>I've got the following smtpd_client_restrictions :
>>
>>smtpd_client_restrictions = permit_sasl_authenticated,
>> permit_mynetworks,
>> reject_rbl_client sbl.spamhaus.org,
>> reject_rbl_client cbl.abuseat.org,
>> reject_rbl_client dynablock.njabl.org
>>
>>I want a client host to be allowed to send mail via sasl authenticated,
>>ALSO when the client host is listed in one of the blacklists. Is this
>>possible?
>
> Restrictions are evaluated in order. First match wins. This means that
> authenticated clients and clients in mynetworks in this case will be
> exempted from the reject_rbl_client restrictions.

I'll wager that the issue here is smtpd_client_restrictions versus
smtpd_recipient_restrictions. He's got permit_sasl_authenticated in the
former, but perhaps not in the latter, so the default
reject_unauth_destination rejects the relay attempt.
--
     mail to this address is discarded unless "/dev/rob0"
     or "not-spam" is in Subject: header