On Jan 4, 2012, at 9:54 PM, /dev/rob0 wrote: > On Wednesday 04 January 2012 20:45:23 Eric Lemings wrote: >> I just noticed that two of my Postfix configuration variables were >> set twice, the latter of which was overriding the former. Here's >> the new values: > > The list policy asks for "postconf -n" because that reports values > Postfix is actually using. > >> smtpd_client_restrictions = permit_mynetworks >> permit_sasl_authenticated reject_rbl_client zen.spamhaus.org >> reject_rbl_client rbl-plus.mail-abuse.org reject_rbl_client >> bl.spamcop.net permit > > MAPS RBL is a paid service only, but I suppose you knew that. > >> smtpd_recipient_restrictions = > > BTW "client" != "recipient", in case that is what you meant by > duplicated settings. They are different settings, but functionally > similar. You could consolidate all of your restrictions into > smtpd_recipient_restrictions. Unless you need complex whitelisting, > it's usually easier that way, to only maintain one set of > restrictions. > >> reject_unauth_pipelining, reject_non_fqdn_recipient, >> reject_unknown_recipient_domain, permit_mynetworks, >> permit_sasl_authenticated, reject_unauth_destination, >> reject_rbl_client relays.ordb.org, >> reject_rbl_clientlist.dsbl.org, > > Both of these are LONG dead and gone, so maybe you did not know about > MAPS RBL? Also, you have no space there. Furthermore, you pasted your > "postconf -n", and it shows a different setting of > smtpd_recipient_restrictions. We believe what postconf(1) tells us.
When I first captured the output from postconf -n, I noticed afterwards that both variables were set twice in the Postfix main.cf file. Something like this: .... smtpd_client_restrictions = <values I wrote myself> smtpd_recipient_restrictions = <values I wrote myself> ... smtpd_client_restrictions = <basic settings written by Server app or some other Mac admin tool> smtpd_recipient_restrictions = <basic settings written by Server app or some other Mac admin tool> I remove the last variables whose values were shown in the first post, then reposted the new values. This change seems to have been my missing link. Since I made it, spam arriving in IMAP boxes has dropped drastically in the past several hours. The RBL sites come from various Postfix tutorials on the web, many of which are getting woefully dated. Thanks for the updates. Eric.
