Hi,
> Is there a way to control smtpd_recipient_restrictions on a per-domain
> > basis so I can relax some of these restrictions for cases like this,
> > instead of a more reactive approach where I'm always adding
> > sender_checks.pcre entries?
>
> Instead of
>
> /etc/postfix/main.cf:
> smtpd_recipient_restrictions =
> ... reject_unknown_sender_domain ...
>
> Use
>
> /etc/postfix/main.cf:
> smtpd_recipient_restrictions =
> ... check_sender_access pcre:/etc/postfix/sender_access.pcre ...
>
> /etc/postfix/sender_access.pcre:
> /\.example\.com$/ DUNNO
> /./ reject_unknown_sender_domain
>
> Though I wonder how one would ever be able to reply to the sender.
>
There are a ton of entries like this, where it appears DNS for the sending
domain is horribly broken, my name server isn't forgiving enough to allow
for those misconfigurations, or both.
May 18 18:24:00 cable postfix-120/smtpd[2919509]: NOQUEUE: reject: RCPT
from send106.emailfilter.io[185.54.163.144]: 450 4.1.8 <u...@ric.rs>:
Sender address rejected: Domain not found; from=<u...@ric.rs> to=<
vojisla...@example.com> proto=ESMTP helo=<send106.emailfilter.io>
If I interpret your instructions properly, this is kind of an as-needed
fqdn bypass, when what I'm trying to do is allow non-fqdn senders just for
certain recipient domains.
The users apparently don't mind receiving the additional spam this may
create, but I also realize if their DNS isn't working, then they likely
have no SPF record either.
Given my circumstance, perhaps there's another way to resolve this?
I'm doing sender checks in smtpd_sender_restrictions, but you've also
recommended adding the sender_access to recipient checks.
smtpd_sender_restrictions =
permit_mynetworks,
check_sender_access ${indexed}sender_checks,
check_sender_access pcre:$config_directory/sender_checks.pcre,
check_sender_access
${default_database_type}:${meta_directory}/spamsources,
check_sender_ns_access ${indexed}/blacklist_ns.cf,
reject_unknown_sender_domain
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
