That is a relief when I get to the new version.

In the mean time I am still having trouble with the workaround. My config now says:

smtpd_helo_restrictions =
      check_client_access cidr:/etc/postfix/heloaccept.cidr

That got rid of the dictionary error however it does not work as I expected. Perhaps I am misunderstanding what this is doing. The last entry in heloaccept.cdir is:

0.0.0.0/0 REJECT

The behavior seems to be that anything not listed in the cdir file is getting rejected (actually it says 'access denied'). The behavior I am looking is the same as reject_unknown_client unless the IP or network is listed in the cdir file with OK before the above entry. What do I have wrong?

Thanks.

On Oct 29, 2009, at 7:52 AM, d.h...@yournetplus.com wrote:

Quoting ram <r...@netcore.co.in>:

On Wed, 2009-10-28 at 08:45 +1100, Phillip Smith wrote:
2009/10/28 Dennis Putnam <dennis.put...@aimaudit.com>
      Thanks or the reply. That sucks. Is there a way around this,
      short of turning that off or whitelisting?

Tell the admin of the remote domain to fix their PTR records and/ or MX
helo configuration because in the meantime, you're going to have to
implement a dirty hack to make their server work.

But the PTR needs no "fix".

The IP resolves to a hostname perfectly fine , only that the hostname
does not resolve.

Is that a valid reason to reject mails ?
I had to remove the reject_unknown_client because of this.

I hope postfix would have a *reject_no_ptr* .. that just checks for PTR
record exists.

From Postfix 2.3 on you can use reject_unknown_reverse_client_hostname:

http://www.postfix.org/postconf.5.html#reject_unknown_reverse_client_hostname





Dennis Putnam
Sr. IT Systems Administrator
AIM Systems, Inc.
11675 Rainwater Dr., Suite 200
Alpharetta, GA  30009
Phone: 678-240-4112
Main Phone: 678-297-0700
FAX: 678-297-2666 or 770-576-1000
The information contained in this e-mail and any attachments is strictly confidential. If you are not the intended recipient, any use, dissemination, distribution, or duplication of any part of this e-mail or any attachment is prohibited. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies, including the attachments.


Reply via email to