OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Allowing OK instead of just DUNNO in check_recipient_mx_access

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Mon Jun 29 2009 - 18:12:12 CDT


postfix-listmonmouth.com wrote:
> The postconf(5) manage says: 'a result of "OK" is not allowed for safety reasons.'
> Is there a way to bypass this?

No.

> I wish to make check_recipient_mx_access into a whitelist instead of a blacklist.
>
> Alternatively is there a way of REJECT-ing all mail that does not match the desired entries (currently set to DUNNO) short of explicitly enumerating all TLD's and appending REJECT to each of them, which is kind of kludgy and would need to be updated if and when new TLD's are added...

Yes, use a pcre/regexp/cidr type map, with a catchall reject
as the final entry. These non-indexed maps are read top to
bottom, first match wins.

a regexp/pcre catchall looks like:
/^/ REJECT comment...

a cidr map catchall looks like:
0.0.0.0/0 REJECT comment...

http://www.postfix.org/pcre_table.5.html
http://www.postfix.org/cidr_table.5.html

   -- Noel Jones