postfix-l...@monmouth.com wrote:
The postconf(5) manage says: 'a result of "OK" is not allowed for safety
reasons.'
Is there a way to bypass this?
No.
I wish to make check_recipient_mx_access into a whitelist instead of a
blacklist.
Alternatively is there a way of REJECT-ing all mail that does not match the
desired entries (currently set to DUNNO) short of explicitly enumerating all
TLD's and appending REJECT to each of them, which is kind of kludgy and would
need to be updated if and when new TLD's are added...
Yes, use a pcre/regexp/cidr type map, with a catchall reject
as the final entry. These non-indexed maps are read top to
bottom, first match wins.
a regexp/pcre catchall looks like:
/^/ REJECT comment...
a cidr map catchall looks like:
0.0.0.0/0 REJECT comment...
http://www.postfix.org/pcre_table.5.html
http://www.postfix.org/cidr_table.5.html
-- Noel Jones
