OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Increased incidences of joe jobbing

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Sat Jul 02 2005 - 09:08:31 CDT


On Sat, Jul 02, 2005 at 09:50:41AM -0400, Wietse Venema wrote:

> > How do you think, what's the bad sides of having recipient information
> > available at DATA and end-of-data stage, *if* we only have exactly
> > *one* recipient?
>
> I can see the questions already coming: why does mail for X
> sometimes slip past the reject rule. People will lose
> confidence in Postfix'x mechanisms.
>

Yes, but the feature Michael is asking for is already how Postfix behaves
(no parameter to turn it on or off, just "do the right thing")!

    main.cf:

        smtpd_restriction_classes = joe
        joe = check_sender_access regexp:/etc/postfix/nobounces
        smtp_data_restrictions =
            permit_mynetworks,
            check_recipient_access cdb:/etc/postfix/joes

    joes:
        # Machine generated please do not edit by hand
        # Expiration date 2005.07.15
            schmoexample.com joe

    joes.src
            schmoexample.com 2005.07.01

    nobounces:
            /^<>$/ REJECT backscatter

    Makefile:
            joes: joes.src
                rm -f joes.tmp.??????
                tmp=`mktemp joes.tmp.XXXXXX` && \
                joescript 14 joes.src > $$tmp && \
                mv $$tmp joes

        joes.cdb: joes
                postmap cdb:joes

    joescript:
            #! /usr/bin/perl

        # code to generate table entries for entries that
        # are less than $ARGV[0] days old.
        $days = shift(ARGV);

        while(<>) {
                chomp;
                next if (/^#/);
                ...
        }

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>