Am Freitag, den 15.11.2019, 18:44 +0000 schrieb Dominic Raferd: > On Fri, 15 Nov 2019, 17:59 Robert Senger, < > robert.sen...@lists.microscopium.de> wrote: > > > Hi all, > > > > I am having some trouble with filtering incoming mail. First, I do > > not > > understand certain "access denied" actions. Second, I cannot get > > filtering by sender domain to work correctly. > > > > Relevant configuration snippets see below. > > > > 1. "access denied" actions > > > > In the logs, I see several messages like these: > > > > Nov 13 11:04:43 prokyon postfix/smtpd[30195]: connect from > > s1.namares.eu > > [93.189.46.48] > > Nov 13 11:04:44 prokyon postfix/smtpd[30195]: NOQUEUE: reject: RCPT > > from > > s1.namares.eu[93.189.46.48]: 554 5.7.1 <rob....@microscopium.de>: > > Recipient address rejected: Access denied; from=<u...@namares.eu> > > to=< > > rob....@microscopium.de> proto=ESMTP helo=<mail.namares.eu> > > Nov 13 11:04:44 prokyon postfix/smtpd[30195]: disconnect from > > s1.namares.eu[93.189.46.48] ehlo=1 mail=1 rcpt=0/1 data=0/1 rset=1 > > quit=1 > > commands=4/6 > > > > Postfix immediately says "access denied". I see these lines for a > > small > > number of domains, and only these three lines, nothing else. > > There's no > > reason logged, as it is if other filtering options trigger (e.g. > > "Helo > > command rejected: need fully-qualified hostname"). So, what is > > going on > > here? None of the affected domains is listed in any access > > restrictions > > file/db. At least one inportant domain (a big business social > > network, > > popular in Germany) is affected and this is a problem for us. > > > > 2. Filtering by sender domain not working > > > > I am trying to reject emails coming in from certain domains (e.g. > > .sxxt.de, see below), but I can't get it to work. I've put the > > domains > > into sender_access and recipient_access files, ran postmap, but > > emails > > still go through. > > > > I already tried to put sender_access and recipient_access into > > smtpd_sender_restrictions and smtpd_recipient_restrictions in > > different > > combinations/order, but no luck. I never see "550" in the logs. > > Why? > > > > The access is denied because of 'Recipient address rejected' so I > would > look there for a solution...
Hm, the recipient address is (in this case) my own address and receives dozens of regular emails every day from other domains without any trouble... That's why I am confused. Robert -- Robert Senger
