OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 127.* immediate bounce

From: Wietse Venema (wietseporcupine.org)
Date: Wed Jan 25 2006 - 14:31:31 CST


Pavel Urban:
> Hello,
>
> what do you suggest as 'the most clean' approach to the situation when
> some servers announce 127.0.0.1 or something similar as their MX? We're
> right now running perimeter relay servers that don't bind to 127.0.0.1
> so the mail to such domains sits in the queue for quite a long time.

Try: check_helo_mx_access, check_recipient_mx_access, or
check_sender_mx_access (Postfix 2.1 and later). These can also be
used to block mail that claims to have servers in nonroutable
networks such as 10, 192.168, and bogons.

        Wietse