Re: can check_helo_access go in smtpd_helo_restrictions?

2014-09-17 Thread Robert Schetterer 
Am 17.09.2014 um 12:17 schrieb LuKreme:
> Subject kind of says it all, can you put check_helo_access in the 
> smtpd_helo_restrictions block or does it need to be in 
> smtp_recipient_restrictions?
> 

i have

smtpd_helo_restrictions = permit_mynetworks,
  permit_sasl_authenticated,
  ...
  ...
 reject_invalid_hostname,
  reject_non_fqdn_hostname,
  check_helo_access hash:/etc/postfix/helo_access,
  reject_unauth_pipelining


Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

Re: can check_helo_access go in smtpd_helo_restrictions?

2014-09-17 Thread li...@rhsoft.net 

Am 17.09.2014 um 12:17 schrieb LuKreme:
> Subject kind of says it all, can you put check_helo_access in the 
> smtpd_helo_restrictions block or does it need to be in 
> smtp_recipient_restrictions?

yes, it's indicated by the name but anyways:
http://www.postfix.org/postconf.5.html#smtpd_delay_reject


inbound only MTA:

smtpd_helo_restrictions =
 check_helo_access proxy:regexp:/etc/postfix/blacklist_helo.cf
 check_sender_access proxy:hash:/etc/postfix/whitelist_sender.cf
 reject_non_fqdn_helo_hostname
 reject_invalid_helo_hostname

[root@mail-gw:~]$ cat maillog | grep "Unacceptable HELO" | wc -l
45

helo=
helo=
helo=
...

can check_helo_access go in smtpd_helo_restrictions?

2014-09-17 Thread LuKreme 
Subject kind of says it all, can you put check_helo_access in the 
smtpd_helo_restrictions block or does it need to be in 
smtp_recipient_restrictions?

-- 
Good old Dame Fortune. You can _depend_ on her.