reject_rbl_client config in map file?

2009-06-10 Thread Harakiri

Is it possible to specify the blackhole servers in a separate file? I only 
found the option, that you specify reject_rbl_client in the main.cf multiple 
times. My problem is that i have a cluster of postfix servers and settings like 
transport map and relay domains are all in a seperate file which can be easily 
file synced, so that i do not need to make the changes to every sever, just 
once. However with reject_rbl_client it seems i would have to modify the 
main.cf on each machine, since i cannot sync this file, it contains server 
specific values.

Any idea if it is possible to use map or pointers to a file for this config?


  


Re: reject_rbl_client config in map file?

2009-06-10 Thread Ralf Hildebrandt
* Harakiri :
> 
> Is it possible to specify the blackhole servers in a separate file? I
> only found the option, that you specify reject_rbl_client in the
> main.cf multiple times. My problem is that i have a cluster of postfix
> servers and settings like transport map and relay domains are all in a
> seperate file which can be easily file synced, so that i do not need to
> make the changes to every sever, just once. However with
> reject_rbl_client it seems i would have to modify the main.cf on each
> machine, since i cannot sync this file, it contains server specific
> values.
> 
> Any idea if it is possible to use map or pointers to a file for this config?

Use a makefile to assemble main.cf from parts

-- 
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Realist: Optimist mit Erfahrung


Re: reject_rbl_client config in map file?

2009-06-10 Thread Harakiri



--- On Wed, 6/10/09, Ralf Hildebrandt  wrote:

> From: Ralf Hildebrandt 
> Subject: Re: reject_rbl_client config in map file?
> To: postfix-users@postfix.org
> Date: Wednesday, June 10, 2009, 6:45 AM
> * Harakiri :
> > 
> > Is it possible to specify the blackhole servers in a
> separate file? I
> > only found the option, that you specify
> reject_rbl_client in the
> > main.cf multiple times. My problem is that i have a
> cluster of postfix
> > servers and settings like transport map and relay
> domains are all in a
> > seperate file which can be easily file synced, so that
> i do not need to
> > make the changes to every sever, just once. However
> with
> > reject_rbl_client it seems i would have to modify the
> main.cf on each
> > machine, since i cannot sync this file, it contains
> server specific
> > values.
> > 
> > Any idea if it is possible to use map or pointers to a
> file for this config?
> 
> Use a makefile to assemble main.cf from parts

How should that work if i just have unison/rsync between a few servers and they 
only sync each other - there is no option to execute make everytime


  


Re: reject_rbl_client config in map file?

2009-06-10 Thread Ralf Hildebrandt
* Harakiri :

> > Use a makefile to assemble main.cf from parts
> 
> How should that work if i just have unison/rsync between a few servers and 
> they only sync each other - there is no option to execute make everytime

Simply run "make" in the directory every minute. Or use incrond

-- 
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
The same people that tell you that a Linux program is as good as a
WinNT program would also tell you it's better to wipe your ass with a
belt sander instead of toilet paper. I can hear them now -- "It may
not look as good but it's faster and does a more thorough job!  


Re: reject_rbl_client config in map file?

2009-06-10 Thread mouss
Harakiri a écrit :
> 
> 
> --- On Wed, 6/10/09, Ralf Hildebrandt  wrote:
> 
>> From: Ralf Hildebrandt 
>> Subject: Re: reject_rbl_client config in map file?
>> To: postfix-users@postfix.org
>> Date: Wednesday, June 10, 2009, 6:45 AM
>> * Harakiri :
>>> Is it possible to specify the blackhole servers in a
>> separate file? I
>>> only found the option, that you specify
>> reject_rbl_client in the
>>> main.cf multiple times. My problem is that i have a
>> cluster of postfix
>>> servers and settings like transport map and relay
>> domains are all in a
>>> seperate file which can be easily file synced, so that
>> i do not need to
>>> make the changes to every sever, just once. However
>> with
>>> reject_rbl_client it seems i would have to modify the
>> main.cf on each
>>> machine, since i cannot sync this file, it contains
>> server specific
>>> values.
>>>
>>> Any idea if it is possible to use map or pointers to a
>> file for this config?
>>
>> Use a makefile to assemble main.cf from parts
> 
> How should that work if i just have unison/rsync between a few servers and 
> they only sync each other - there is no option to execute make everytime
> 
> 
>   

The first question I would have is: do you really change your DNSBL list
that often?

if you insist, then use a source file, say main.in (or even a db), that
you sync/whatever and a script to generate main.cf from this file. As
Ralf suggested, a makefile can help here (but is not necessary).




Re: reject_rbl_client config in map file?

2009-06-10 Thread Noel Jones

mouss wrote:

Harakiri a écrit :


--- On Wed, 6/10/09, Ralf Hildebrandt  wrote:


From: Ralf Hildebrandt 
Subject: Re: reject_rbl_client config in map file?
To: postfix-users@postfix.org
Date: Wednesday, June 10, 2009, 6:45 AM
* Harakiri :

Is it possible to specify the blackhole servers in a

separate file? I

only found the option, that you specify

reject_rbl_client in the

main.cf multiple times. My problem is that i have a

cluster of postfix

servers and settings like transport map and relay

domains are all in a

seperate file which can be easily file synced, so that

i do not need to

make the changes to every sever, just once. However

with

reject_rbl_client it seems i would have to modify the

main.cf on each

machine, since i cannot sync this file, it contains

server specific

values.

Any idea if it is possible to use map or pointers to a

file for this config?

Use a makefile to assemble main.cf from parts

How should that work if i just have unison/rsync between a few servers and they 
only sync each other - there is no option to execute make everytime


  


The first question I would have is: do you really change your DNSBL list
that often?

if you insist, then use a source file, say main.in (or even a db), that
you sync/whatever and a script to generate main.cf from this file. As
Ralf suggested, a makefile can help here (but is not necessary).




If OP wants to keep RBLs in a separate file, just use an 
access table.


# main.cf
smtpd_recipient_restrictions =
  permit_mynetworks
  # permit_sasl_authenticated
  reject_unauth_destination
  ...other UCE checks...
  check_client_access pcre:/etc/postfix/rbl_checks


# /etc/postfix/rbl_checks
# NOTE: the "reject_rbl..." lines must be indented!
/^/
  reject_rbl_client zen.spamhaus.org
  reject_rbl_client foo.example.com
  reject_rhsbl_sender  list.example.org



  -- Noel Jones