OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Accepting A Specific Network

From: Magnus Bäck (magnusdsek.lth.se)
Date: Mon Jun 15 2009 - 11:56:16 CDT


On Monday, June 15, 2009 at 18:51 CEST,
     Dennis Putnam <dennis.putnamaimaudit.com> wrote:

> I am having a problem with a network that does not have reverse DNS at
> this time. I am trying to configure postfix (v2.1.5) so that it will
> accept hosts from that network. I thought the order of the commands in
> 'smtpd_client_restrictions' section was significant but it does not
> seem to work. I put my 'smtpdreject' hash first:
>
> smtpd_recipient_restrictions =
> check_client_access hash:/etc/postfix/smtpdreject
> reject_non_fqdn_sender
> reject_unknown_sender_domain
> permit_sasl_authenticated
> permit_mynetworks
> reject_unauth_destination
> check_sender_access hash:/etc/postfix/sender_whitelist
> reject_rbl_client bl.spamcop.net
> reject_rbl_client dnsbl.sorbs.net
> reject_rbl_client cbl.abuseat.org
> reject_rbl_client dnsbl.njabl.org
>
> The 'smtpdreject' contains, as the first entry:
>
> nnn.nnn.nnn.0 OK
>
> However, hosts from that network still are being rejected because
> there is no reverse DNS. What am I doing wrong? Thanks.

None of the restrictions above reject clients without a working reverse
lookup. You probably have a reject_unknown_client elsewhere.

As always, show logs and "postconf -n" output.

--
Magnus Bäck
magnusdsek.lth.se