OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Is it possible to postfix to do conditional greylisting

From: Alexander Hoogerhuis (alexhboxed.no)
Date: Tue Aug 14 2007 - 10:04:08 CDT


This qustion is partially on greylisting (postgrey) and partially on
postifx. I currently have postgrey running just fine and providing
greylisting, but it there any way to structure the client restrictions
so that I only greylist if the sending client has mismatching
forward/reverse DNS and no SPF?

I.e. I want any site that seems to have its DNS and SPF in order to not
go through grey-listing.

My current settings are:

> smtpd_client_restrictions =
> permit_mynetworks,
> check_helo_access hash:/etc/postfix/helo_access,
> reject_invalid_hostname,
> reject_non_fqdn_hostname,
> reject_non_fqdn_sender,
> reject_non_fqdn_recipient,
> reject_unknown_sender_domain,
> reject_unlisted_recipient,
> reject_unauth_destination,
> check_policy_service inet:127.0.0.1:10030,
> permit

-A