OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix Restriction class not working properly

From: Magnus Bäck (magnusdsek.lth.se)
Date: Wed Aug 02 2006 - 03:12:48 CDT


On Wednesday, August 02, 2006 at 07:05 CEST,
     ankush grover <grover.pixgmail.com> wrote:

> On 8/2/06, Magnus Bäck <magnusdsek.lth.se> wrote:
>
> > You missed a couple of log entries from smtpd(8) at the start
> > of the log, but this line shows anyway that the client was
> > localhost. The loopback interface is listed in mynetworks,
> > so your permit_mynetworks bypasses your restrictions.
>
> Aug 1 16:48:57 mail postfix/cleanup[4864]: 0E3766FFE5: hold: header
> Received: from localhost (localhost.localdomain [127.0.0.1])??by
> mail.sun.net (Postfix) with ESMTP id 0E3766FFE5??for
> <testingexample.com>; Tue, 1 Aug 2006 16:48:57 +0530 (IST) from
> localhost.localdomain[127.0.0.1]; from=<grover.pixgmail.com>
> to=<testingexample.com> proto=ESMTP helo=<localhost>
>
> You can see the mail is coming from grover.pixgmail.com and this
> address is not listed in sender_access.

I repeat: The messages are coming from a host in mynetworks, and your
permit_mynetworks restriction will bypass your check_recipient_access
restriction. Move check_recipient_access above permit_mynetworks and
your problem will be solved.

(You are still not posting all log entries for the message, but never
mind.)

[...]

--
Magnus Bäck
magnusdsek.lth.se