Benny,
I think my main issue is that PERMIT still continues evaluation and i'm
thinking that it stops when it doesn't.
So no way to have a PERMIT that stops evaluation right? only the
negative options stop evaluation the next ones?
*
DUNNO → continues evaluation
*
PERMIT → continues evaluation
*
Only REJECT (or DEFER) stops processing
On 2025-06-25 15:29, Benny Pedersen via Postfix-users wrote:
Jorge Bastos skrev den 2025-06-25 16:14:
quote:
postconf
smtpd_{client,helo,sender,recipient,relay,data,end_of_data}_restrictions
your setup miss permit in
helo,sender,recipient,relay,data,end_of_date, so its only permit
currently in client restrictions
you will possible move all this into a restriction class where it
only shcekced if its not permited
I may be missing something here, could you help me understand it?
in the client restrictions, i've been noticing that sometimes, IP's
that are whitelisted, also got blacklisted by the next rules,
something may be wrong here then.
the helo,data,end_of_data restrictions doesn't have a default, they
have to have a default?
what exactly am i missing to make it work?
tux ~ # postconf -nf | grep smtpd_
smtpd_client_restrictions = permit_sasl_authenticated,
permit_mynetworks,
smtpd_data_restrictions = permit_sasl_authenticated, permit_mynetworks
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_sasl_authenticated, permit_mynetworks
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks,
smtpd_relay_restrictions = permit_sasl_authenticated, permit_mynetworks,
smtpd_sender_restrictions = permit_sasl_authenticated,
permit_mynetworks,
add more check_client_access to this lines, but after what i have
default here
reject log lines might help, i have imho not seen logs yet
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
