On 23/01/16 16:30, Nguyen Nang Thang wrote: > Wietse: > I dit my test as below: > # nc localhost 25 < /tmp/postscreen-greet-wait.txt > The output: > 220 gw.mydomain.com ESMTP Postfix (2.10.1) > 250 2.1.0 Ok > 250 2.1.5 Ok > 354 End data with <CR><LF>.<CR><LF> > 250 2.0.0 Ok: queued as 35CA025E69 > > The postfix/postcreeen log does not show info "PREGREET count after time from > [address]:port text...", > test message delivered normally (expect: test message prevented by > postscreen). > So, is there another way to quickly make smtp connection via "nc" or another > tool to test the parameter > "postscreen_greet_wait"?
You would have localhost listed in mynetworks, which by default bypasses the postscreen tests: > postscreen_access_list (default: permit_mynetworks) > Permanent white/blacklist for remote SMTP client IP addresses. > postscreen(8) searches this list immediately after a remote SMTP client > connects. Specify a comma- or whitespace- > separated list of commands (in upper or lower case) or lookup tables. > The search stops upon the first command that fires for the client IP address. > > permit_mynetworks > Whitelist the client and terminate the search if the client > IP address matches $mynetworks. Do not subject the client to any > before/after 220 greeting tests. Pass the > connection immediately to a Postfix SMTP server process. Try the test again from a host that is not listed in mynetworks. Peter
