OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Accepting A Specific Network

From: Dennis Putnam (dennis.putnamaimaudit.com)
Date: Mon Jun 15 2009 - 11:51:40 CDT


I am having a problem with a network that does not have reverse DNS at
this time. I am trying to configure postfix (v2.1.5) so that it will
accept hosts from that network. I thought the order of the commands in
'smtpd_client_restrictions' section was significant but it does not
seem to work. I put my 'smtpdreject' hash first:

smtpd_recipient_restrictions =
         check_client_access hash:/etc/postfix/smtpdreject
         reject_non_fqdn_sender
         reject_unknown_sender_domain
         permit_sasl_authenticated
         permit_mynetworks
         reject_unauth_destination
         check_sender_access hash:/etc/postfix/sender_whitelist
         reject_rbl_client bl.spamcop.net
         reject_rbl_client dnsbl.sorbs.net
         reject_rbl_client cbl.abuseat.org
         reject_rbl_client dnsbl.njabl.org

The 'smtpdreject' contains, as the first entry:

nnn.nnn.nnn.0 OK

However, hosts from that network still are being rejected because
there is no reverse DNS. What am I doing wrong? Thanks.

Dennis Putnam
Sr. IT Systems Administrator
AIM Systems, Inc.
11675 Rainwater Dr., Suite 200
Alpharetta, GA 30009
Phone: 678-240-4112
Main Phone: 678-297-0700
FAX: 678-297-2666 or 770-576-1000
The information contained in this e-mail and any attachments is
strictly confidential. If you are not the intended recipient, any use,
dissemination, distribution, or duplication of any part of this e-mail
or any attachment is prohibited. If you are not the intended
recipient, please notify the sender by return e-mail and delete all
copies, including the attachments.