OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 2.2.8 + amavisd + postgrey

From: mouss (usebsdfree.fr)
Date: Sun Feb 05 2006 - 19:40:26 CST


Bill Bradford a écrit :
> Trying to add postgrey to my Postfix 2.2.8 setup that's currently running
> amavisd as well.
[snip]
> I setup postgrey, running in daemon mode, on port 6000. From my main.cf:
>
> smtpd_recipient_restrictions =
> permit_mynetworks
> permit_mx_backup

This allows anyone to use you as a "free relay".

> reject_unauth_destination
> check_policy_service inet:127.0.0.1:6000
> check_helo_access dbm:/etc/postfix/helo_checks
>
> However, it appears that mail comes in, hits amavisd, gets handed back on
> port 10025, and goes right through - I dont see it "hitting" postgrey at
> all. Is there a way to make postgrey come "before" the mail gets handed
> to amavisd?

Look again at your restrictions:
1- if clients are mine, go through
2- if recipient domain has me as MX, go through
3- reject relay
4- check policy
...

all mail matches one of the 3 first conditions.