OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: problems with permit_sasl and unknown_address

From: Yves Dorfsman (yveszioup.com)
Date: Sun Apr 04 2010 - 20:03:56 CDT


>
>> smtpd_client_restrictions = permit_sasl_authenticated,
>> reject_unknown_address, reject_unknown_client,
>> reject_unknown_reverse_client_hostname,
>> check_client_access hash:/etc/postfix/access,
>> reject_rbl_client sbl-xbl.spamhaus.org
>
> This accepts mail from SASL-authenticated clients and rejects
> unknown stuff from SASL-unauthenticated clients.
>
> Your mail is rejected because the client is not SASL authenticated.

That's right I get rejected before I even have the time to authenticate, right
after the helo (I tried manually with telnet)

> You probably have an SMTP-based content filter in the middle of
> your Postfix system, and failed to configure the post-filter SMTP
> server per the FILTER_README instructions.

No I do not.

However I do have helo_restrictions:

postconf -n |grep helo
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_non_fqdn_hostname,
reject_invalid_hostname

I will comment them out and see if it works. I suspect they don't do a lot in
terms of fighting spam anyway.

--
Yves. http://www.SollerS.ca/