is "OK" stops processing user defined lists (classes) only or entire smtpd_..._restriction?

2008-10-07 Thread sftf
>From http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
"OK" stops processing of an access list and the restriction stage
that contains it.  Processing resumes with the next restriction
stage (if any).

Situation

smtpd_restriction_classes = check_recipient_class
check_recipient_class = check_recipient_access 
hash:/etc/postfix/maps/check_recipient,

hash:/etc/postfix/maps/check_sender:
  mail.ru  DUNNO
  yandex.ru  DUNNO
  google.com check_recipient
  yahoo.com OK

hash:/etc/postfix/maps/check_recipient:
  [EMAIL PROTECTED] OK
  [EMAIL PROTECTED] REJECT

smtpd_recipient_restrictions =
  ,
  check_sender_access hash:/etc/postfix/maps/check_sender,
  


So [EMAIL PROTECTED] OK stops entire `smtpd_recipient_restrictions` ( will not be
processed) or "google.com check_recipient" only (so next is `yahoo.com OK` and 
then )?

Thanks!



how to specify any/catch_all domain/email in HASH access map?

2008-10-07 Thread sftf
For example in this hash I wanna OK for all domains except mail.ru and 
yandex.ru:
hash:/etc/postfix/maps/check_sender:
  mail.ru  REJECT
  yandex.ru  REJECT
   OK

So what I must write insteed of ? Maybe . (single point)?
Thanks.



Re[2]: how to specify any/catch_all domain/email in HASH access map?

2008-10-08 Thread sftf
Actually I wanna selective rbl checks.

smtpd_restriction_classes = rbl_check_class
rbl_check_class =
  reject_rbl_client dnsbl.sorbs.net,
  reject_rbl_client list.dsbl.org,
  reject_rbl_client mail-abuse.blacklist.jippg.org,
  

hash:/etc/postfix/maps/check_client:
  mail.ru  DUNNO
  yandex.ru  DUNNO
   rbl_check_class

so mail.ru, yandex.ru go to next checks without checks against RBL's, but all 
others - with RBL's checks.


>> -Original Message-
>> From: [EMAIL PROTECTED] 
>> [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
>> Sent: Wednesday, 8 October 2008 2:12 PM
>> To: postfix-users@postfix.org
>> Subject: how to specify any/catch_all domain/email in HASH access map?
>> 
>> For example in this hash I wanna OK for all domains except 
>> mail.ru and yandex.ru:
>> hash:/etc/postfix/maps/check_sender:
>>   mail.ru  REJECT
>>   yandex.ru  REJECT
>>OK
>> 
>> So what I must write insteed of ? Maybe . (single point)?
>> Thanks.
>> 
>> 

MT> Are you *sure* you want to explictly pass all mail from every other
MT> domain in the Internet other than those two - that means all mail
MT> originating from other domains will skip the rest of any checks you may
MT> have. 

MT> You don't need to specify anything for all other domains if you are just
MT> intending to block the two domains you list - the default action for any
MT> message that's traversing the header checks is DUNNO (which will then
MT> pass the message onto the next header check, if you have one, or the
MT> message is accepted for delivery).




how to specify any/catch_all domain/email in HASH access map?

2008-10-09 Thread sftf
How to implement logic like below in one HASH map?
pcre:/etc/postfix/maps/check_client:
  /mail\.ru/  DUNNO
  /yandex\.ru/  DUNNO
  /.*/ goto_check_class
Thanks.