Justin Piszcz a écrit :
> 
> 
> On Wed, 11 Feb 2009, Victor Duchovni wrote:
> 
>> You are doing Sender Address Verification (reject_unverified_sender)
>> before doing RBL checks. Fix this. Do the RBL checks first, and consider
>> not doing SAV at all, but if you do use it, do SAV *last*.
>>
> 
>>     smtpd_data_restrictions =
>>         reject_unverified_sender
>>
>> -- 
>>     Viktor.
>>
> 
> Hi,
> 
> Quick question, if one has all of his restrictions in
> smtpd_recipient_restrictions, why is it(?) better to put the
> reject_unverified_sender within the smtpd_data_restrictions?
> 

it helps making sure that SAV will only be done for mail that is not
otherwise rejected or greylisted. it also helps avoiding sorcerer
apprentice SAV on SAV issues.

if you don't use greylisting, you can put the check at the end of
smtpd_recipient_restrictions. but if you use greylisting and your GL
returns defer_if_permit, then SAV will be performed when you prefer to
wait until the client retries.

Reply via email to