From: Noel Jones (njonesmegan.vbhcs.org)
Date: Wed Oct 10 2007 - 12:38:23 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

At 12:25 PM 10/10/2007, Terry Carmen wrote:
>Noel Jones wrote:
>>At 12:08 PM 10/10/2007, Terry Carmen wrote:
>>>I have an access file that doesn't seem to work as expected.
>>>
>>>main.cf contains:
>>>
>>>smtpd_sender_restrictions =check_sender_access
>>>hash:/etc/postfix/access,reject_unknown_sender_domain
>>>
>>>
>>>/etc/postfix/access contains:
>>>
>>>66.165.224.0/19 REJECT Hosted on spam-friendly network
>>>208.116.142.0/24 REJECT Spam is not accepted
>>>208.116.222.0/24 REJECT Spam is not accepted
>>>66.180.217.0/24 REJECT Spam is not accepted
>>>
>>>I did "postmap access" to create access.db, but the REJECT lines
>>>don't seem to have any effect.
>>>
>>>Anybody have any thoughts or suggestions?
>>
>>Sounds as if you want a check_client_access map rather than
>>check_sender_access.
>>An IP address is a client property, not a sender property.
>>
>>client - connecting IP and verified rDNS hostname
>>sender - MAIL FROM command given by client during SMTP, also
>>usually listed in the Return-Path: header. Sometimes confused with
>>the From: header.
>
>I actually use the same file for client and sender access (it
>contains some other entries as well).
>
>Not sure if that might be part of the problem.
>
>Terry
>

Now that I look at your file a little more closely, it appears you're
using CIDR notation, which is only valid for cidr: type files. A
check_sender_access map will never match an IP in a cidr table.

--
Noel Jones

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]