OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: access file : DISCARD vs REJECT

From: Jonathan Dill (jonathannerds.net)
Date: Fri Apr 07 2006 - 11:31:52 CDT


After dusting out the cobwebs from my brain :) I think I recall that
with some versions of postfix, DISCARD is ignored if in main.cf:

smtpd_delay_reject = no

There should be error messages about DISCARD being ignored if that is
the case. However, changing that to "yes" has negative performance
implications, although I do not recall the specifics.

If you know some address is sending you mainly spam with forged From and
no useful mail, isn't it better to DISCARD to avoid creating backscatter
to a third party?

Pascal Maes wrote:
>
> Le 7 avr. 06 à 16:46, mouss a écrit :
>
>> Pascal Maes wrote:
>>> hello,
>>> In main.cf, I have a rule for smtpd_recipient_restrictions which says :
>>> check_sender_access hash:/etc/postfix/access
>>> In the file access, I have the following line :
>>> namedomain.be REJECT
>>> and it works !
>>> mail from: namedomain.be
>>> 250 2.1.0 Ok
>>> rcpt to: pascal.maeselec.ucl.ac.be
>>> 554 5.7.1 <namedomain.be>: Sender address rejected: Access denied
>>> If I replace REJECT by DISCARD, it doesn't work anymore (I receive
>>> the mail)
>>> mail from: namedomain.be
>>> 250 2.1.0 Ok
>>> rcpt to: pascal.maeselec.ucl.ac.be
>>> 250 2.1.5 Ok
>>> What's wrong ?
>>
>> do not discard unless you know why.
>>
>
>
> You're right and REJECT will do the job,
> but I wonder why DISCARD is not working.
>
> If you have an idea (I have also posted an extract of the logfiles).
>
> --
> Pascal
>
>
>
>