Le 02/02/2011 21:25, Noel Jones a écrit : > On 2/2/2011 1:48 PM, mouss wrote: >> Le 02/02/2011 19:28, Steve Jenkins a écrit : >>> smtpd_recipient_restrictions = >>> permit_sasl_authenticated, >>> permit_mynetworks, >>> reject_unauth_destination, >>> check_client_access pcre:/etc/postfix/fqrdns.pcre, >>> reject_unknown_reverse_client_hostname, >>> warn_if_reject reject_non_fqdn_helo_hostname, >>> warn_if_reject reject_invalid_helo_hostname, >>> warn_if_reject reject_unknown_helo_hostname, >> >> reject_unknown_helo_hostname implies a dns query. do you really want it >> here? (do you need it at all!). >> >> also, be careful with warn_if_reject. postfix caches the results of >> checks. so if you use say reject_invalid_helo_hostname later (for >> example as the result of one of your check_*_acces), then it will only >> warn. > > No, warn_if_reject only applies to the next restriction, not to > subsequent restrictions even if it's a repeat. >
I had the impression that postfix used to cache the result and use it even if it's a warn. but now I tested and this doesn't match reality. not sure if it's something of the past or if my memory plays bad games...