OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Checking restrictions for client and sender

From: mouss (usebsdfree.fr)
Date: Thu Sep 14 2006 - 15:48:51 CDT


rotfl wrote:
> I've got a bit confused with smtpd_client_restrictions and
> smtpd_sender_restrictions.
> If I understand right, first checks restrictions for client when it
> connects to postfix, therefore there's no
> MAIL FROM yet. So if rule results in reject, no other checks done.

In the default setup (smtpd_delay_reject = yes),
client/helo/sender/recipient checks are performed after (each) RCPT TO,
not before. see the docs for why this is the case.
> Second checks for text in MAIL FROM command.
> Is it possible to block e-mails from some IP/domains except whitelisted?

yes, but it's a bad idea to whitelist senders, as they are easily forged.

if you post your current config and say what problem you are trying to
solve, you'll get better recommendations.