OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: smtpd_sender_restrictions vs. different ip addresses?

From: Sven Juergensen (s.juergensenkielnet.de)
Date: Thu Apr 05 2007 - 07:16:30 CDT


Thanks Martin,

for some reason my idea doesn't appear to be working.

I'm trying to seperate access to the mailserver
by defining two IP blocks as seen in sender_access.

If client 1.2.3.4 connects to the mailserver, the
'restrictive' class is supposed to kick in and
check the 'from:' in the MAIL FROM envelope part
of the smtp dialogue. If it's any user from domain.tld
then permit and exit successfully; not following
any other statements of the list.

Now, if the 'from:' yields anything else, it
*should* generate a reject_warning in the logs.

Well, it doesn't ;) What am i missing here?

Thanks in advance,

Sven

smtpd_restriction_classes = restrictive, permissive

restrictive =
        warn_if_reject,
        check_sender_access regexp:/etc/postfix/allowed_from,
        permit

permissive =
        permit

smtpd_sender_restrictions =
        check_sender_access cidr:/etc/postfix/sender_access,
        permit

/etc/postfix/sender_access
 1.2.3.0/24 restrictive
 0.0.0.0/0 permissive

/etc/postfix/allowed_from
 /^from:.+\domain\.tld/ PERMIT
 /.+/ REJECT

Martin Schmitt wrote:
> Sven Juergensen schrieb:
>
>> Can anyone toss me a bone?
>
> Here you go: http://www.postfix.org/RESTRICTION_CLASS_README.html
>
> -martin
>