Re: [postfix-users] Helo Host not found

2004-04-29 Thread Asfihani
On Thu, Apr 29, 2004 at 01:37:46PM +0700, Romie Djapri wrote:

 Nah ini dia yang saya bingung. Kan di check_sender_access saya udah define
 .namadomain.com OK
 
 Kok masih ditolak juga ya.. ? Apakah mesti Complete email address ?
 
 [EMAIL PROTECTED] OK

Saya jadi bingung karena anda selalu mengubah-ubah masalah, dari email
sebelumnya anda bilang ingin me-whitelist client yang menggunakan HELO
tidak valid. Sekarang ganti ke check_sender_access. Coba kalau ada log
yang menunjukkan restriksi anda masih tidak sesuai dengan keinginan,
silakan dipaste ke sini. 

 Asfihani


Re: [postfix-users] Helo Host not found

2004-04-29 Thread Asfihani
On Thu, Apr 29, 2004 at 02:11:45PM +0700, Romie Djapri wrote:

 Oke.. gini aja. Maksudku adalah bisa nggak kalau kita mau whitelist client 
 yang dari helo host yg nggak ada tapi bukan berdasarkan helo aksesnya 
 melainkan berdasarkan email addressnya ?
 
 Soalnya kalau dari helo hostnya aja yg di whitelist..  kan kalau ketahuan sama 
 spammer. tetap bisa di send UCE donk..  betul kan ?

Kalau begitu tinggal meletakkan sender ybs ke file dalam
check_sender_accces. Buat check_sender_accces ordernya lebih dulu,
misalnya setelah reject_unauth_destination. Maka jika key sender akan
sesuai pada check_sender_accces restriksi dibawahnya akan diabaikan.

 Asfihani


[postfix-users] Helo Host not found

2004-04-28 Thread Romie Djapri
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi rekan-rekan,

Ada yg mau ditanyain lagi nih.
Kemarin Pak Asfihani pernah bilang kalau ada helo dari host yg nggak ada
dimasukan ke whitelist..  tapi saya coba kok nggak berhasil ya..
Sekarang ada yg komplain nih.. :D

Ini dari main.cf
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_recipient_restrictions =
permit_tls_clientcerts,
permit_mynetworks,
reject_unauth_destination,
check_sender_access hash:/etc/postfix/sender_access,
check_helo_access hash:/etc/postfix/helo_access,
reject_rbl_client relays.ordb.org,
reject_rbl_client sbl.spamhaus.org,
reject_rbl_client opm.blitzed.org,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client blackholes.wirehub.net,
reject_rbl_client list.dsbl.org,
reject_rbl_client dsn.rfc-ignorant.org,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_unknown_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
check_client_access hash:/etc/postfix/client_access,

disable_vrfy_command = yes
strict_rfc821_envelopes = yes
swap_bangpath = no
body_checks = regexp:/etc/postfix/body_checks
header_checks = regexp:/etc/postfix/header_checks

Nah di sender_access:
# lots of spam used to claim to be from public.com.  The rest are just
# in case.
public.com  554 Mail from example domains not accepted.
in-addr.arpa554 Mail from example domains not accepted.
example.com 554 Mail from example domains not accepted.
anonymous@  554 Mail from anonymous is always spam.
# If you get a lot of mail from abused Formmail.pl scripts this may be userful
nobody@ 554 Mail from nobody is always spam.
# you may also whitelist the non-spammish users that come from
# spammish domains here.
# [EMAIL PROTECTED]   OK
# [EMAIL PROTECTED]554 Too much spam from this user.
.buymailserver.com  REJECT We Dont accept SPAM.
.bankmandiri.co.id  OK
.plasabali.com  OK
.has.hitachi.com.sg OK

Tapi setelah saya coba hasilnya tetap seperti ini:

[EMAIL PROTECTED] romie]$ telnet gabriel.tokolinux.com 25
Trying 202.155.117.162...
Connected to gabriel.tokolinux.com (202.155.117.162).
Escape character is '^]'.
220 gabriel.tokolinux.com ESMTP Postfix
helo mailsweeper.hitachi.com.sg
250 gabriel.tokolinux.com
mail from: [EMAIL PROTECTED]
rc250 Ok
pt to: [EMAIL PROTECTED]
450 mailsweeper.hitachi.com.sg: Helo command rejected: Host not found
quit
221 Bye
Connection closed by foreign host.

Saya salah urutan ya ? CMIIW.

- --
Best Regards,
Romie Djapri
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAkIIeTsC/7FyTGpERAl48AKCGoCRCA+JE1BY0Lx+mgv3mzK+nTACcDyWQ
Psup6VNpn5ZYuDnGFmsd0E0=
=EX/J
-END PGP SIGNATURE-


Re: [postfix-users] Helo Host not found

2004-04-28 Thread Asfihani
On Thu, Apr 29, 2004 at 11:18:34AM +0700, Romie Djapri wrote:

 Ada yg mau ditanyain lagi nih.
 Kemarin Pak Asfihani pernah bilang kalau ada helo dari host yg nggak ada
 dimasukan ke whitelist..  tapi saya coba kok nggak berhasil ya..
 Sekarang ada yg komplain nih.. :D
 
 Ini dari main.cf
 smtpd_delay_reject = yes
 smtpd_helo_required = yes
 smtpd_recipient_restrictions =
 permit_tls_clientcerts,
 permit_mynetworks,
 reject_unauth_destination,
 check_sender_access hash:/etc/postfix/sender_access,
 check_helo_access hash:/etc/postfix/helo_access,

Isi file /etc/postfix/helo_access ?

 Asfihani