OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Reject with text

From: /dev/rob0 (rob0gmx.co.uk)
Date: Mon Jul 24 2006 - 12:07:15 CDT


On Monday 24 July 2006 06:57, Thomas Domingo Dahlmann wrote:
> I have made the following restriction class where I try to reject
> spoofed freemail accounts. Fx mails coming from xxxgmail.com but the
> relay host is not *.gmail.com are rejected.
>
> I would like to return a message to that reject but if I try to put
> text behind the "reject" it is just ignored and the sender just gets
> "access denied".
>
> I use version 2.1.1
>
> smtpd_recipient_restrictions =
> ...
> check_sender_access hash:/etc/postfix/freemail_access
> ...
>
> smtpd_restriction_classes = from_freemail_host
> from_freemail_host = check_client_access
> hash:/etc/postfix/freemail_hosts, reject

The restriction "reject" just gives "Access denied". In place of that
last "reject" you would want another lookup. I would use a CIDR map:
    cidr:/etc/postfix/freemail_reject

/etc/postfix/freemail_reject :
0.0.0.0/0 450 Please use your provider's server for sending mail

Note the 450: if you do a hard reject (5xx), you risk rejecting mail
because of a temporary DNS failure.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header