OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Restrictions Stopped Working

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Wed Nov 02 2005 - 10:27:37 CST


At 08:44 AM 11/2/2005, Rich Shepard wrote:
> With the patient assistance of you folks, I fixed
> what I thought were the
>last glitches since I enhanced the UCE restrictions
>in my postfix-2.2.5
>installation. Apparently I was too optimistic.
>
> What I've seen in my inbox the past week are
> messages from domains that are
>entered in maps:
>
> check_client_access
> hash:/etc/postfix/badaddr
> check_sender_access
> hash:/etc/postfix/badaddr
>
>and IP addresses that are in equivalent maps. There
>are phrases in the
>header_checks and body_checks that are no longer
>being properly identified
>and rejected.
>
> How do I proceed to identify why these checks
> stopped working? Once I know
>that I can proceed to fix them.

Use postmap -q to test your tables.
Remember that a message may be base64 encoded or have
a phrase split between lines preventing body_checks
from matching. Inspect the message using vi, not a
mail program.
If something you think should be blocked by a rule
isn't, the reason is that a previous rule gave an OK
response.

http://www.postfix.org/DEBUG_README.html

--
Noel Jones