On Fri, 15 Nov 2019, 17:59 Robert Senger, < robert.sen...@lists.microscopium.de> wrote:
> Hi all, > > I am having some trouble with filtering incoming mail. First, I do not > understand certain "access denied" actions. Second, I cannot get > filtering by sender domain to work correctly. > > Relevant configuration snippets see below. > > 1. "access denied" actions > > In the logs, I see several messages like these: > > Nov 13 11:04:43 prokyon postfix/smtpd[30195]: connect from s1.namares.eu > [93.189.46.48] > Nov 13 11:04:44 prokyon postfix/smtpd[30195]: NOQUEUE: reject: RCPT from > s1.namares.eu[93.189.46.48]: 554 5.7.1 <rob....@microscopium.de>: > Recipient address rejected: Access denied; from=<u...@namares.eu> to=< > rob....@microscopium.de> proto=ESMTP helo=<mail.namares.eu> > Nov 13 11:04:44 prokyon postfix/smtpd[30195]: disconnect from > s1.namares.eu[93.189.46.48] ehlo=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 > commands=4/6 > > Postfix immediately says "access denied". I see these lines for a small > number of domains, and only these three lines, nothing else. There's no > reason logged, as it is if other filtering options trigger (e.g. "Helo > command rejected: need fully-qualified hostname"). So, what is going on > here? None of the affected domains is listed in any access restrictions > file/db. At least one inportant domain (a big business social network, > popular in Germany) is affected and this is a problem for us. > > 2. Filtering by sender domain not working > > I am trying to reject emails coming in from certain domains (e.g. > .sxxt.de, see below), but I can't get it to work. I've put the domains > into sender_access and recipient_access files, ran postmap, but emails > still go through. > > I already tried to put sender_access and recipient_access into > smtpd_sender_restrictions and smtpd_recipient_restrictions in different > combinations/order, but no luck. I never see "550" in the logs. Why? > The access is denied because of 'Recipient address rejected' so I would look there for a solution...
