Matus UHLAR - fantomas via Postfix-users:
> as I maintain some mail gateways with postfix, I would like to discard the
> DSN ehlo keyword, from all hosts but internal network.
>
> I see that with smtpd_discard_ehlo_keyword_address_maps
> "Tables will be searched in the specified order until a match is found."
>
> but is it possible to allow all keywords from internal network and drop DSN
> from everywhere else?
>
> should I use workaround and use dummy silend-discard without other keyword?
>
> smtpd_discard_ehlo_keyword_address_maps =
>      cidr:{ {10/8 silent-discard} {0/0 silent-discard,dsn} }

Wietse Venema via Postfix-users:
smtpd_discard_ehlo_keyword_address_maps =
    cidr:{ {!10/8  silent-discard,dsn} }

On 23.02.24 11:12, Wietse Venema via Postfix-users wrote:
But that does not generalize to hosts with IPv4 and IPv6. In that case,
your approach will be more suitable.

Thank you.

For evidence, I have set it up only on port 25 using master.cf:

smtp      inet  n       -       y       -       1       postscreen
smtpd     pass  -       -       y       -       -       smtpd
  -o smtpd_discard_ehlo_keywords=silent-discard,dsn

thus, it does not apply on submission and smtps ports and main.cf:

smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/discard_keywords

/etc/postfix/discard_keywords contains:

10.0.0.0/8      silent-discard
192.168.0.0/16  silent-discard

This way, I was able to also discard other keywords from other internal clients.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Holmes, what kind of school did you study to be a detective?
- Elementary, Watkins.  -- Daffy Duck & Porky Pig
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to