Jorge Bastos:
root@fastmail:~# postconf -f
smtpd_{client,helo,sender,recipient,relay,data,end_of_data}_restrictions
smtpd_client_restrictions = permit_mynetworks, check_client_access
mysql:/etc/postfix/mysql-client-ip-access.cf,
permit_sasl_authenticated,
reject_unknown_reverse_client_hostname,
reject_unknown_client_hostname,
permit_dnswl_client krn.korumail.com, permit_dnswl_client
list.dnswl.org,
permit_dnswl_client wl.mailspike.net, permit_dnswl_client
rep.mailspike.net,
permit_dnswl_client dnswl.spfbl.net, permit_dnswl_client
wl.rbl.debacom.pl,
permit_dnswl_client white.dnsbl.brukalai.lt, permit_dnswl_client
reputation-ip.rbl.scrolloutf1.com, permit_dnswl_client
5d804ed9--5.white.mail.abusix.zone, reject_rbl_client
zen.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client
spam.spamrats.com, reject_rbl_client bb.barracudacentral.org,
reject_rbl_client bl.mailspike.net, reject_rbl_client
dyna.spamrats.com,
reject_rbl_client pbl.spamhaus.org, reject_rbl_client
bl.rbl.debacom.pl,
reject_rbl_client b.barracudacentral.org, reject_rbl_client
dnsbl.spfbl.net,
reject_rbl_client bl.octopusdns.com, reject_rbl_client bl.spamcop.net,
reject_rbl_client dnsbl.justspam.org, reject_rbl_client
ips.backscatterer.org, reject_rbl_client black.junkemailfilter.com,
reject_rbl_client all.s5h.net, reject_rbl_client
0bad5f5c48c0db3b18055d9ee6a1b57e.combined.mail.abusix.zone,
check_policy_service unix:private/policy-dnswlz, reject
That evaluates to PERMIT.
smtpd_helo_restrictions =
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain, permit_mynetworks,
permit_sasl_authenticated,
check_sender_access mysql:/etc/postfix/mysql-sender-access.cf,
check_policy_service unix:private/policy-spf, reject_rhsbl_sender
dbl.urlhaus.abuse.ch, reject_rhsbl_sender black.uribl.com,
reject_rhsbl_sender rhsbl.spamrats.com, reject_rhsbl_sender
multi.surbl.org,
reject_rhsbl_sender dnsbl.spfbl.net, reject_rhsbl_sender
dbl.spamhaus.org,
reject_rhsbl_sender
67462bfba5fa4--b.dblack.mail.abusix.zone, permit
That has RBL checks without check_client_access exclusion, therefore
the above RBLs can reject mail from the client that you want to
exclude from RBL checks.
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_recipient, reject_unknown_recipient_domain,
reject_unauth_destination, check_client_access
cidr:/etc/postfix/client.cidr, check_client_access
hash:/etc/postfix/client_checks, check_sender_access
hash:/etc/postfix/sender_checks, permit
That has no RBL checks.
smtpd_relay_restrictions = check_client_access
cidr:/etc/postfix/client.cidr,
reject_non_fqdn_sender, permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination, reject_rbl_client zen.spamhaus.org,
reject_rbl_client cbl.abuseat.org, reject_rbl_client bl.spamcop.net
And that has some RBL checks witihout check_client_access exclusion,
therefore the above RBLs can reject mail from the client that you
want to exclude from RBL checks.
smtpd_data_restrictions =
smtpd_end_of_data_restrictions =
root@fastmail:~#
Now, what was the complete Postfix reject response. It would
name the RBL and provide a clue where the client exclusion is
missing.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
