OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Policy Server Protocol - Request for (small) Enhancement(s)

From: Ronald F. Guilmette (rfgtristatelogic.com)
Date: Fri May 16 2008 - 14:28:11 CDT


In message <482D6841.4060306netoyen.net>, you wrote:

>Ronald F. Guilmette wrote:
>- the recipient attribute is available in the RCPT TO stage
>- the recipient atrbute is also available in DATA and END-OF-MESSAGE
>stages provided the message is addressed to a single recipient.

OK. That clarifies the behavior entirely. Thank you.

>> Second question: Regardless of the set of "stages" in which the "recipient"
>> parameter is only supplied to the policy server when it is the singular
>> allowed recipient, why is it that Postfix can't/doesn't supply the entire
>> list of all of the (multiple) allowed recipients? Is there some special
>> problem that I'm not aware of that prevents Postfix from handing the policy
>> server the whole and entire list of permitted recipients? (I'm just trying
>> to understand things a bit better here.)
>>
>
>there are a couple of problems:
>- how to separate the addresses? would postfix send each recipient in an
>attribute? ... etc

Yes. That would work.

>- what if the message is addressed to 100 recipients? ... etc

I'm not following you. What special problem(s) would that cause?

>anyway, this has been discussed here before. please search the archives.

OK. I'll ry to hunt down the info. Thanks.

>if you want the policy server to do per recipient actions, then code
>that in the policy server.
>...
>smtpd_recipient_restrictions is executed once for each recipient. so
>just call the policy service in your smtpd_recipient_restrictions.

Ah! OK. This was something that I obviously didn't quite understand,
or remember. (I _did_ build a small policy server before... different
from the new one that I'm working on now. But that was quite awhile
ago, so there are obviously some details about the interactions between
Postfix and the policy server that I forgot. Thanks for refreshing
my memory.)

Regards,
rfg