Re: Creating exceptions to greylisting

2013-02-03 Thread James Griffin
--> Gerben Wierda [2013-02-02 20:55:42 +0100]: > Just so there is no misunderstanding: I am unhappy running an > older version that is not updated with security fixes anymore and > I had planned to upgrade before now (but not immediately when 10.8 > came out as 10.8.0 Server was not what you say

Re: Creating exceptions to greylisting

2013-02-02 Thread Stan Hoeppner
On 2/2/2013 3:50 PM, Viktor Dukhovni wrote: > On Sat, Feb 02, 2013 at 03:34:30PM -0600, Stan Hoeppner wrote: > >>check_client_access pcre:/etc/postfix/client_access >>... >> >> /etc/postfix/client_access: >> /.*facebook\.com$/ permit > > This is not robust for two reason

Re: Creating exceptions to greylisting

2013-02-02 Thread Viktor Dukhovni
On Sat, Feb 02, 2013 at 03:34:30PM -0600, Stan Hoeppner wrote: >check_client_access pcre:/etc/postfix/client_access >... > > /etc/postfix/client_access: > /.*facebook\.com$/permit This is not robust for two reasons, the first is a simple oversight, replace: /

Re: Creating exceptions to greylisting

2013-02-02 Thread Stan Hoeppner
On 2/2/2013 1:55 PM, Gerben Wierda wrote: > Just so there is no misunderstanding: I am unhappy running an older version > that is not updated with security fixes anymore and I had planned to upgrade > before now (but not immediately when 10.8 came out as 10.8.0 Server was not > what you say trus

Re: Creating exceptions to greylisting

2013-02-02 Thread Stan Hoeppner
On 2/2/2013 11:10 AM, Gerben Wierda wrote: > Dag & Dank Wietse, > > Can I do perl regex, e.g. > > outmail\d\d\d.snc\d.facebook.com permit > > or globbing like > > outmail*.snc4*.facebook.com /etc/postfix/main.cf: smtpd_recipient_restrictions = ... reject_unauth_destina

Re: Creating exceptions to greylisting

2013-02-02 Thread Gerben Wierda
Just so there is no misunderstanding: I am unhappy running an older version that is not updated with security fixes anymore and I had planned to upgrade before now (but not immediately when 10.8 came out as 10.8.0 Server was not what you say trustworthy. I skipped 10.7 server altogether because

Re: Creating exceptions to greylisting

2013-02-02 Thread James Griffin
--> Gerben Wierda [2013-02-02 19:37:41 +0100]: > Actually, I'm still on /usr/libexec/postfix/greylist.pl > as I am using Mac OS X Server 10.6.8 and I haven't dared to upgrade > to a higher version of OS X Server as they were busy crippling it > in many respects. It's actually very easy to upgra

Re: Creating exceptions to greylisting

2013-02-02 Thread Reindl Harald
Am 02.02.2013 19:37, schrieb Gerben Wierda: > Actually, I'm still on > > /usr/libexec/postfix/greylist.pl > > as I am using Mac OS X Server 10.6.8 and I haven't dared to upgrade to a > higher version of OS X Server as they were busy crippling it in many respects. you are aware that OSX 10.6

Re: Creating exceptions to greylisting

2013-02-02 Thread Gerben Wierda
Actually, I'm still on /usr/libexec/postfix/greylist.pl as I am using Mac OS X Server 10.6.8 and I haven't dared to upgrade to a higher version of OS X Server as they were busy crippling it in many respects. G On 2 Feb 2013, at 18:51, John Allen wrote: > On 02/02/2013 11:25 AM, Gerben Wierd

Re: Creating exceptions to greylisting

2013-02-02 Thread John Allen
On 02/02/2013 11:25 AM, Gerben Wierda wrote: So, I need a whitelist. But how? If you are using postgrey then you can add something to the white list which can be found in/etc/postgrey (debian). Might help John A

Re: Creating exceptions to greylisting

2013-02-02 Thread Gerben Wierda
Dag & Dank Wietse, Can I do perl regex, e.g. outmail\d\d\d.snc\d.facebook.compermit or globbing like outmail*.snc4*.facebook.com And secondly, I also get mail I want to leave through where the sender is an operation like messagelabs, but I want to accept only certain senders using me

Re: Creating exceptions to greylisting

2013-02-02 Thread Wietse Venema
Gerben Wierda: > smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks > reject_unauth_destination check_policy_service unix:private/policy permit > To exclude some site from greylist checks, use an access table *after* reject_unauth_destination and before the check_policy_

Creating exceptions to greylisting

2013-02-02 Thread Gerben Wierda
I have set up my smtpd restrictions as follows: smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated check_sender_access hash:/etc/postfix/whitelist reject_rbl_client zen.spamhaus.org permit smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_un