Re: Clarification between smtpd_sender_restrictions & smtpd_recipient_restrictions

2011-06-14 Thread mouss
Le 14/06/2011 04:21, Janantha Marasinghe a écrit :
> Thanks Sahil
> 
> Basically What i want to check is when a mail is recieved from postfix
> if it can reject the e-mail is the sending e-mail server is in the
> blacklist rbl
> 
> smtpd_recipient_restrictions is about "Mail To:" right. So if I have an
> e-mail account on my postfix server and the spammer says "mail to"
> address it will still pass ? Am I correct?
> 


you are confusing
- the stage at which a check is done (smtp_recipient_restrictions,
smtpd_client_restrictions, ...)

- the nature of the check (check_client_access, ... reject_rbl_client, ...)

for a starter, begin by putting all your checks under
smtpd_recipient_restrictions. here is a "pedagogic" example. (obviously,
this is not a copy-paste sample)

smtp_recipient_restrictions =
reject_non_fqdn_sender
reject_non_fqdn_recipient
#
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
#
reject_unlisted_recipient
reject_unlisted_sender
#
reject_invalid_helo_hostname
reject_non_fqdn_helo_hostname
reject_unknown_reverse_client_hostname
#
check_recipient_access  ${db}/access_recipient
#whitelists
check_client_access ${cidr}/access_client
check_client_access ${db}/access_client
check_client_access ${dnswl}
#!notyet!permit_dnswl_client swl.spamhaus.org
#!notyet!permit_dnswl_client list.dnswl.org
#
reject_rbl_client   zen.spamhaus.org
reject_rhsbl_sender dbl.spamhaus.org
#reject_rhsbl_clientdbl.spamhaus.org
reject_rhsbl_reverse_client dbl.spamhaus.org
#
reject_rbl_client   bl.spamcop.net
reject_rbl_client   psbl.surriel.com
reject_rbl_client   korea.services.net



Re: Clarification between smtpd_sender_restrictions & smtpd_recipient_restrictions

2011-06-14 Thread Rod Dorman
On Monday, June 13, 2011, 22:21:17, Janantha Marasinghe wrote:
> ...
> smtpd_recipient_restrictions is about "Mail To:" right.

Its about "RCPT TO" not "Mail To:"

http://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions
   "The access restrictions that the Postfix SMTP server applies
   in the context of the RCPT TO command."

-- 
r...@polylogics.com "The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote." - Ambassador Kosh




Re: Clarification between smtpd_sender_restrictions & smtpd_recipient_restrictions

2011-06-13 Thread Janantha Marasinghe

Thanks Sahil

Basically What i want to check is when a mail is recieved from postfix 
if it can reject the e-mail is the sending e-mail server is in the 
blacklist rbl


smtpd_recipient_restrictions is about "Mail To:" right. So if I have an e-mail account on 
my postfix server and the spammer says "mail to" address it will still pass ? Am I 
correct?




On 6/9/2011 7:44 AM, Sahil Tandon wrote:

On Thu, 2011-06-09 at 07:30:31 +0530, Janantha Marasinghe wrote:


I'm a bit confused between the

smtpd_recipient_restrictions

&   smtpd_sender_restrictions I want to implement RBL on my mail server
and I was thinking having the reject_rbl_client on the
smtpd_sender_restrictions.

If someone could clarify this to me it would be great.

http://www.postfix.org/SMTPD_ACCESS_README.html





Re: Clarification between smtpd_sender_restrictions & smtpd_recipient_restrictions

2011-06-08 Thread Sahil Tandon
On Thu, 2011-06-09 at 07:30:31 +0530, Janantha Marasinghe wrote:

> I'm a bit confused between the
> 
> smtpd_recipient_restrictions
> 
> &  smtpd_sender_restrictions I want to implement RBL on my mail server
> and I was thinking having the reject_rbl_client on the
> smtpd_sender_restrictions.
> 
> If someone could clarify this to me it would be great.

http://www.postfix.org/SMTPD_ACCESS_README.html

-- 
Sahil Tandon 


Clarification between smtpd_sender_restrictions & smtpd_recipient_restrictions

2011-06-08 Thread Janantha Marasinghe

Hi,

I'm a bit confused between the

smtpd_recipient_restrictions  
  &  
smtpd_sender_restrictions
I want to implement RBL on my mail server and I was thinking having the 
reject_rbl_client on the smtpd_sender_restrictions.

If someone could clarify this to me it would be great.

thanks