> On Mar 26, 2023, at 14:27, Viktor Dukhovni via Postfix-users
> <postfix-users@postfix.org> wrote:
>
> On Sun, Mar 26, 2023 at 02:15:27PM -0700, Doug Hardie via Postfix-users wrote:
>
>> Thanks Viktor. I went with the first approach and am getting errors:
>>
>> warning: inline:{DigitalInsight.firefightersfirstcreditunion.org =
>> permit_auth_destination} is unavailable. missing '=' after attribute name:
>> "inline:{DigitalInsight.firefightersfirstcreditunion.org =
>> permit_auth_destination}"; need "inline:{name=value...}
>>
>> and others like:
>>
>> warning: inline:{DigitalInsight.firefightersfirstcreditunion.org =
>> permit_auth_destination} lookup error for "file...@crytech.il"
>>
>> I think that message is saying the : after inline should be an =. I'll give
>> that a try.
>
> No, the syntax should instead be:
>
> inline:{{digitalinsight.firefightersfirstcreditunion.org =
> permit_auth_destination}}
> or
>
> inline:{digitalinsight.firefightersfirstcreditunion.org=permit_auth_destination}
>
> Per the documentation:
>
> http://www.postfix.org/DATABASE_README.html
>
> "inline:{ key=value, { key = text with whitespace or comma }}
I found the = didn't work. So I tried the example in the access(5) man page.
That doesn't give any errors, but the domain is still rejected.
Here is the master.cf extract for smtpd:
smtpd pass - - n - 50 smtpd
-o smtpd_recipient_restrictions=$incoming_smtpd_restrictions
Here is the main.cf extract:
incoming_smtpd_restrictions =
check_policy_service inet:127.0.0.1:10040,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
check_sender_access hash:/usr/local/etc/postfix/access
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_mynetworks,
check_recipient_access hash:/usr/local/etc/postfix/tempfail,
reject_unauth_destination,
reject_unlisted_recipient
reject_rbl_client bl.spamcop.net,
reject_rbl_client b.barracudacentral.org,
reject_rbl_client zen.spamhaus.org,
permit
the contents of access:
# Firefighters CU has missing DNS
156.55.193.213 OK
-- Doug
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
