OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
(no subject)

From: Francesco Abeni (f.abenigivi.it)
Date: Thu Nov 08 2007 - 03:48:05 CST


mouss wrote:

> Francesco Abeni wrote:

>> Helo. I am not able to make the smtpd_restriction_classes work.

>> (...)

>> I almost copied and pasted the example from

>> <http://www.postfix.org/RESTRICTION_CLASS_README.html#external>
http://www.postfix.org/RESTRICTION_CLASS_README.html#external. But

>> still, the message gets delivered.

>>

>> What am i missing?

>> [snip]

>> smtpd_recipient_restrictions = permit_mynetworks,

>

> That's it: permit_mynetworks = permit if mail comes from my networks.

> no check will be done.

>

>> reject_non_fqdn_recipient, check_client_access

>> hash:/etc/postfix/pop-before-smtp, reject_unauth_destination,

>> check_sender_access hash:/etc/postfix/restricted-senders

>

> remove the last check from here, and put it under

> smtpd_sender_restrictions:

>

> smtpd_sender_restrictions =

> check_sender_access hash:/etc/postfix/restricted-senders

 

Yes, that worked. I thought that the restrictions order could be the
problem, but i'm glad you pointed out the open relay issue, I could easily
have failed to notice it. So thank you very much.

 

Just a minor issue, now, if I'd like to discard the message without bounce,
I guess I have to modify the line:

 

local_only = check_recipient_access hash:/etc/postfix/local-domains, reject

 

in

 

local_only = check_recipient_access hash:/etc/postfix/local-domains, drop

 

Is that correct?

 

Thank you again.

 

--

Francesco Abeni

f.abenigivi.it

 

 

 

--

Francesco Abeni

f.abenigivi.it