On Fri, 18 Mar 2016 11:55:19 +0300 Artem Chuprina <r...@lasgalen.net> wrote:
> Vasiliy P. Melnik -> Victor Wagner @ Fri, 18 Mar 2016 10:33:44 +0200: > > VPM> К сожалению не знаю как в постфиксе, у меня экзим, но верифай > VPM> это отдельная процедура, и у меня в экзиме она расположена > VPM> должна быть просто раньше грейлистинга > > Так верифай на одном конце, а грейлистинг на другом :) > > Но вообще мне казалось, что sender verify должен производиться от > имени <> (в смысле mail from: <>). А не от какого попало. А вот оказывается, нынче это не так: By default, Postfix probe messages have a sender address "double-bounce@$myorigin" (with Postfix versions before 2.5, the default is "postmaster@$myorigin"). This is SAFE because the Postfix SMTP server does not reject mail for this address. You can change the probe sender address into the null address ("address_verify_sender ="). This is UNSAFE because address probes will fail with mis-configured sites that reject MAIL FROM: <>, while probes from "double-bounce@$myorigin" would succeed. The downside of using a non-empty sender address is that the address may end op on spammer mailing lists. Although Postfix always discards mail to the double-bounce address, this still results in wasted network bandwidth and server capacity. To defeat address harvesting, Postfix 2.9 and later support time-dependent sender addresses when you specify a non-zero address_verify_sender_ttl value. http://www.postfix.org/ADDRESS_VERIFICATION_README.html >