From: Administrator Beckspaced.com (adminbeckspaced.com)
Date: Sat Oct 29 2005 - 11:12:35 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hello,

how can i block all access from a specific domain and all its sub
domains in postfix version 2.2.5?

so far i use in main.cf

smtpd_client_restrictions = check_client_access hash:/etc/postfix/access

and in the access at /etc/postfix/access

.example.com REJECT

then a postmap /etc/postfix/access

and finally a rcpostfix reload ...

but somehow it still doesn't catch all the different subdomain of
example.com!

somewhere on the Internet i found ...

If you want smtpd access map entries to match hosts and sub-domains
on just the domain part (e.g.: "example.com" matches "host.example.com"
and "host.subdomain.example.com," you must specify:

parent_domain_matches_subdomains = smtpd_access_maps

in main.cf. Otherwise, you have to do things like:

example.com REJECT
.example.com REJECT

||

but somehow it still doesn't catch me the sub domains!

any help would be great ;-) thanks ...

oh .. and before i forget ... here's the output of postconf -n

alias_maps = hash:/etc/aliases
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
local_recipient_maps = mysql:/etc/postfix/mysql_aliases
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = beckspaced.com
myhostname = mail.beckspaced.com
mynetworks = mysql:/etc/postfix/mysql_pbsp
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
sample_directory = /usr/share/doc/packages/postfix/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
smtpd_data_restrictions = reject_multi_recipient_bounce
smtpd_error_sleep_time = 3s
smtpd_hard_error_limit = 10
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient
    ,reject_non_fqdn_sender
    ,reject_unknown_sender_domain
    ,reject_unknown_recipient_domain
    ,permit_mynetworks
    ,reject_unauth_destination
    ,check_recipient_access hash:/etc/postfix/roleaccount_exceptions
    ,check_recipient_access hash:/etc/postfix/recipient.reject
    ,check_helo_access pcre:/etc/postfix/helo_checks
    ,reject_rbl_client relays.ordb.org
    ,reject_rbl_client list.dsbl.org
    ,reject_rbl_client bl.spamcop.net
    ,reject_rbl_client sbl.spamhaus.org
    ,permit
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions =
smtpd_soft_error_limit = 5
smtpd_use_tls = no
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]