From: Martin Schmitt (Schmitt Systemberatung) (masscsy.de)
Date: Tue Feb 03 2009 - 04:45:47 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi all!

I'm confronted with a legacy system (/etc/postfix has not received any
edits since 2006, current uptime is 150 days) that looks like this:

# grep -v '^#' /etc/postfix/access
0.0.0.0/0 HOLD

# postconf -n | grep access
smtpd_sender_restrictions = hash:/etc/postfix/access

# postconf mail_version
mail_version = 2.1.1

OS is SLES9.

All incoming mail gets put on hold, as intended.

Everything about this seems to be wrong: The CIDR notation in "access",
the smtpd_sender_restrictions and the fact that the client match appears
to be done in the sender context.

postconf -n output is below.

Can anyone on the list share an insight as to why holding of all mail
works in this configuration?

Thanks all,

-martin

alias_maps = hash:/etc/aliases
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = 127.0.0.1, x.x.x.50
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname, localhost.$mydomain
myhostname = xxxx.example.com
mynetworks = x.x.x.0/24, 127.0.0.1/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_client_restrictions = hash:/etc/postfix/clients
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550

--
Martin Schmitt - Schmitt Systemberatung - http://www.scsy.de
DE 35415 Pohlheim, Gießener Str. 18
DE 65307 Bad Schwalbach, Am Bräunchesberg 9
Linux/UNIX - Internet - E-Mail Infrastructure - Antispam/Antivirus
- "What goes up, must come down. Ask any system administrator." -

• application/pgp-signature attachment: OpenPGP digital signature

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]