OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: A Question About "check_client_access"

From: /dev/rob0 (rob0gmx.co.uk)
Date: Wed Oct 12 2005 - 09:17:23 CDT


On Wednesday 2005-October-12 08:21, Rich Shepard wrote:
> I have a restriction map of IP addresses I want rejected. They are
> invoked within /etc/postfix/main.cf with 'check_client_access
> hash:/etc/postfix/badip'. Over the past couple of days, spam has made
> it into my inbox despite having an IP address in a block listed in
> that file. The address is always the one from which my MTA received

"postmap -q ip.add.re.ss hash:/etc/postfix/badip" tells you whether
"ip.add.re.ss" is found in the hash table "/etc/postfix/badip".
postmap.1.html has details. access.5.html explains the format of access
table lookups. For a list of IP addresses you might also want to
consider the cidr format: cidr_table(5), cidr_table.5.html.

But wait, Rich, there's more ... I am going to lead you to The Fountain
of Postfix Knowledge. When you installed your Postfix did you enter a
value for html_directory ? You should have. For Slackware
"/usr/share/postfix" would be an appropriate choice, or put that under
"/usr/local". Make a symlink from that into your apache DocumentRoot
("/var/www/htdocs" in Slackware.) Bookmark it (http://yourhost/postfix)
in your browser, refer to it often.

It gets better! Well, no, not really. But I want to tell you about the
one document which helped me start to put all the pieces together in my
mind: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt

Good luck, have fun.
--
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header