From: Bill Bradford (mrbillmrbill.net)
Date: Sun Feb 05 2006 - 20:04:25 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, Feb 06, 2006 at 02:40:26AM +0100, mouss wrote:
> > smtpd_recipient_restrictions =
> > permit_mynetworks
> > permit_mx_backup
> This allows anyone to use you as a "free relay".

How so? I successfuly pass all of abuse.net's open relay tests.
Tried it again just now.

I had permit_auth_destination and reject_unknown_recipient_domain in there
until earlier today. Just added them back in.

> Look again at your restrictions:
> ...
> all mail matches one of the 3 first conditions.

Where should I put the greylisting check, then?

Here's the full relevant section of my main.cf:

smtpd_helo_restrictions =
        permit_mynetworks

smtpd_client_restrictions =
        permit_mynetworks
        reject_rbl_client sbl-xbl.spamhaus.org

smtpd_sender_restrictions =
        permit_mynetworks
        reject_unauth_pipelining
        reject_unknown_sender_domain

smtpd_recipient_restrictions =
        permit_mynetworks
        permit_mx_backup
        permit_auth_destination
        reject_unauth_destination
        reject_unknown_recipient_domain
        check_policy_service inet:127.0.0.1:6000
        check_helo_access dbm:/etc/postfix/helo_checks

Bill

--
Bill Bradford
Houston, Texas

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]