Le 16/03/2012 18:22, Jack a écrit : > Hello All, > > > > I'm having a problem where I am rejecting messages from one of our servers, > but I'm not clear as to why. > > > > We are using: > > check_helo_access hash:/etc/postfix/helo_access > > > > We have in helo_access the following: > > > > ourdomain.com REJECT Helo Check helo_access > > ourdomain.net REJECT Helo Check helo_access > > x.x.x.x REJECT Helo Check helo_access > > localhost REJECT Helo Check helo_access > > > > I thought this would reject messages from someone saying they are our IP, > saying they are localhost, or saying they are ourdomain.com and > ourdomain.net, however it looks like we are rejecting the messages coming > from server.ourdomain.net > > > > Exact error: > > 554 5.7.1 < server7.ourdomain.net >: Helo command rejected: Helo Check > helo_access; > > > > Do I need to specify the subdomain otherwise it will consider this to be > *.ourdomain.net? >
# postconf -e parent_domain_matches_subdomains= http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains > Is this rule not beneficiary ? from a purist viewpoint, helo should be ignored. helo checks are useful to block stupid ratware. but then, it is more efficient to block the offending IPs. from a nother viewpoint, wel, do whatever you think is good for you... > I know SPF can handle this as well and we do > use it. No comments. spf debates are forbidden on this list (please don't ask why. google is your friend).
