On Fri, Apr 27, 2012 at 08:55:15AM -0700, kar...@mailcan.com wrote:
>   smtpd_recipient_restrictions =
>     check_recipient_access hash:/usr/local/etc/postfix/conf/bozos

Remove or at least move _after_ reject_unauth_destination. This is prone
for open relay.

>     reject_non_fqdn_recipient

Why?

>     permit_sasl_authenticated
>     permit_mynetworks
>     reject_unauth_destination
>     reject_unlisted_recipient
>     reject_non_fqdn_sender
>     reject_unknown_sender_domain
>     reject_rbl_client zen.spamhaus.org
>     reject_rbl_client b.barracudacentral.org
>     permit

Remove, it does nothing anyway.

> In the end it's getting blocked, and that's what I want.  But, if I
> understand how this works, every one of those rejects is a DNS check to
> spamhaus, and some postfix load on my server.

You have a local dns cache, it does the work for you.

Bastian

-- 
Intuition, however illogical, is recognized as a command prerogative.
                -- Kirk, "Obsession", stardate 3620.7

Reply via email to