Matus UHLAR - fantomas wrote on Thu, 8 Nov 2018 12:12:49 +0100:
> the problem lies in "parent_domain_matches_subdomains" which is (and should
> be) empty in postfix and apparently even is in new postfix version.
As I wrote earlier, it *is* set implicitely by backwards-compatibilty.
> First I tho
On 08.11.18 01:31, Kai Schaetzl wrote:
Thanks for the answer. But, please look again.
/etc/mail/access:
createsend.com REJECT
cmail20.com REJECT
On 08.11.18 12:06, Matus UHLAR - fantomas wrote:
you should specify .createsend.com, because the connecting domain is
mx17.a.outbound.createsend.co
Noel Jones wrote on Wed, 7 Nov 2018 13:30:08 -0600:
With the above list, check_sender_access comes first. Postfix does
not reorder the list you have specified.
On 08.11.18 01:31, Kai Schaetzl wrote:
Thanks for the answer. But, please look again.
/etc/mail/access:
createsend.com REJECT
cmai
Noel Jones wrote on Wed, 7 Nov 2018 13:30:08 -0600:
> With the above list, check_sender_access comes first. Postfix does
> not reorder the list you have specified.
Thanks for the answer. But, please look again.
/etc/mail/access:
createsend.com REJECT
cmail20.com REJECT
The order is:
> > c
On 11/7/2018 12:40 PM, Kai Schaetzl wrote:
> Wietse Venema wrote on Wed, 7 Nov 2018 12:10:40 -0500 (EST):
>
>> HOWEVER, by default Postfix evaluates all of these at RCPT TO time.
>
> which means smtpd_delay_reject = yes is the default?
Yes, that's the default, and generally should not be changed
Wietse Venema wrote on Wed, 7 Nov 2018 12:10:40 -0500 (EST):
> HOWEVER, by default Postfix evaluates all of these at RCPT TO time.
which means smtpd_delay_reject = yes is the default?
Am I correct in assuming that with "yes" it doesn't matter if I list the
client restrictions in smtpd_client_re
Kai Schaetzl:
[ Charset ISO-8859-1 converted... ]
> Addendum.
>
> Currently, I get client rejections with the setup shown in my last mail
> (despite the delay). I don't know if it hits *always*, though. I can't
> check if it didn't hit for some client where the name matches, there are
> too man
Addendum.
Currently, I get client rejections with the setup shown in my last mail
(despite the delay). I don't know if it hits *always*, though. I can't
check if it didn't hit for some client where the name matches, there are
too many entries.
I expected it to carry out the helo checks before
Carsten Rosenberg wrote on Wed, 7 Nov 2018 16:23:54 +0100:
> So if you reject somebody with an access_map, you won't see any scan
> result in rspamd.
This would be fine ;-)
> Do you have any problems with this situation?
Yes, it's the other way around here. e.g. there is no rejection happening
Kai,
both are running simultaneously. So at smtpd_recipient_restriction stat
the milter will also get the recipients. As far as I have seen the
postfix restriction react faster.
So if you reject somebody with an access_map, you won't see any scan
result in rspamd. Only the milter connect, because
I'm having trouble with access_maps kicking in after an upgrade from a
Postfix 2.something to Postfix 3.1. on Ubuntu 14.06 and using postscreen
and rspamd milter.
After some testing I'm not sure yet, but it looks like the recommended
smtpd_delay_reject = yes in connection with having the access
11 matches
Mail list logo