OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Confused about smtpd_sender_restrictions and smtpd_recipient_restrictions

From: GT4NE1 (gt4ne1gmail.com)
Date: Thu Oct 04 2007 - 13:25:12 CDT


You're right, that last smtpd_recipient_restrictions should be
smtpd_sender_restrictions.

So it doesn't matter which one you use reject_rbl_client then? What about

check_sender_access hash:/etc/postfix/sender_access
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
and SPF checking using policy in master.cf

Does the same go for them? That it doesn't matter where you put them.
 I wonder why everyone puts them in smtpd_recipient_restrictions then?

-GT

On 10/4/07, Ralf Hildebrandt <Ralf.Hildebrandtcharite.de> wrote:
> * GT4NE1 <gt4ne1gmail.com>:
> > I'm going to implement some RBLs on my Postfix server and I'm confused
> > about where to put them. Everywhere I read, it says to add them in
> > smtpd_recipient_restrictions
> >
> > According to this page:
> >
> > http://www.postfix.org/SMTPD_ACCESS_README.html
> >
> > smtpd_sender_restrictions Optional Reject MAIL FROM information
> > smtpd_recipient_restrictions Required Reject RCPT TO information
> >
> > Why don't I want RBLs in smtpd_sender_restrictions? I don't care
> > about who the email is going to (smtpd_recipient_restrictions), just
> > where it is coming from (smtpd_recipient_restrictions).
>
> You made a typo there.
> What reject_rbl_client DOES does NOT depend on where you put it.
>
> --
> Ralf Hildebrandt (Ralf.Hildebrandtcharite.de) plonkcharite.de
> Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
> http://www.arschkrebs.de
> I will write on a huge cement block "BY ACCEPTING THIS BRICK THROUGH
> YOUR WINDOW, YOU ACCEPT IT AS IS AND AGREE TO MY DISCLAIMER OF ALL
> WARRANTIES, EXPRESS OR IMPLIED, AS WELL AS DISCLAIMERS OF ALL
> LIABILITY, DIRECT, INDIRECT, CONSEQUENTIAL OR INCIDENTAL, THAT MAY
> ARISE FROM THE INSTALLATION OF THIS BRICK INTO YOUR BUILDING.
>