On Tue, 14 Jun 2011 20:05:24 -0500, Noel Jones wrote:
That's an interesting idea in itself, but in the scope of pix
workarounds it's not a huge improvement since it still requires
manual
intervention per server/domain.
fail2ban could be ones friend if postfix have this
fail2ban then just grep logs for outgoing mails that failed pr ip, and
add this header ignore pr cidr maps
anyway, don't think it's possible. I think all possible tables would
need to be loaded before postfix knew which one to use, or postfix
would need to wastefully launch a new smtp for each delivery.
as is now its not, but i think it could be solved :-)
is smtp_header_checks already pr recipients server ?
No, currently either a global setting or custom transports with -o
smtp_header_checks option.
okay
I was thinking a setting integrated with smtp_pix_workarounds would
be more automatic, with little maintenance once configured.
suggest pfsense is out of the question for hosts that runs cisco
hardware
