OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Postfix Restriction class not working properly

From: ankush grover (grover.pixgmail.com)
Date: Tue Aug 01 2006 - 03:12:01 CDT


hey,

 I am trying to implement the Postfix restriction classes for one of
the accounts in my network. There is an account called staff and the
mail sent to this address goes to all the
employees in the organisation.

I have configured main.cf as per the restriction class example

smtpd_restriction_classes = insiders_only
insiders_only = check_sender_access hash:/etc/postfix/sender_access, reject
smtpd_recipient_restrictions = permit_mynetworks,
                              permit_sasl_authenticated,
                             check_recipient_access
hash:/etc/postfix/recipient_access,
                              reject_invalid_hostname,
                              reject_unknown_sender_domain,
                              reject_unknown_recipient_domain,
                              reject_unauth_destination,
                              reject_rbl_client relays.ordb.org,
                              reject_rbl_client opm.blitzed.org,
                              reject_rbl_client list.dsbl.org,
                              reject_rbl_client sbl.spamhaus.org,
                              reject_rbl_client cbl.abuseat.org,
                              reject_rbl_client dul.dnsbl.sorbs.net,
                              permit

But still I am able to receive the mail from outside on this account
from accounts list permitted to send mail to this account.

recipient_access file
staffexample.com insiders_only

sender_access file

example.com OK
ankushgmail.com OK
ankushyahoo.com OK
johnyahoo.com OK

Apart from my domain(example.com) some other email ids from which
mails are allowed to be send to this account are added to the
sender_access.

I am using Postfix 2.1.5 on FC3 with MailScanner.

Any pointer what can be the problem?

Thanks & Regards

Ankush Grover