Re: restriction classes

2014-07-25 Thread Viktor Dukhovni
On Fri, Jul 25, 2014 at 11:50:22AM -0500, Noel Jones wrote: > On 7/24/2014 10:58 PM, Will Yardley wrote: > > On Wed, Jul 23, 2014 at 10:51:41AM -0500, Noel Jones wrote: > >>> and then have > >>> recommended = > >> > >> Yes, that should work as expected. > > > > This seemed to work as expected in

Re: restriction classes

2014-07-25 Thread Noel Jones
On 7/24/2014 10:58 PM, Will Yardley wrote: > On Wed, Jul 23, 2014 at 10:51:41AM -0500, Noel Jones wrote: >>> and then have >>> recommended = >> >> Yes, that should work as expected. > > This seemed to work as expected in my tests on 2.6.x. However, on 2.3.3, > I get: > > postfix/smtpd[5673]: fat

Re: restriction classes

2014-07-24 Thread Will Yardley
On Wed, Jul 23, 2014 at 10:51:41AM -0500, Noel Jones wrote: > > and then have > > recommended = > > Yes, that should work as expected. This seemed to work as expected in my tests on 2.6.x. However, on 2.3.3, I get: postfix/smtpd[5673]: fatal: restriction class `recommended' needs a definition

Re: restriction classes

2014-07-24 Thread Will Yardley
Thanks so much for the helpful response - just wanted to make sure I was heading in the right direction, and this was exactly what I needed. On Wed, Jul 23, 2014 at 10:51:41AM -0500, Noel Jones wrote: > > My thought was that maybe I should do something like this instead: > > > > reject_non

Re: restriction classes

2014-07-23 Thread Noel Jones
On 7/22/2014 7:34 PM, Will Yardley wrote: > I'm wondering if someone can help me make sure I get the order right for > some recipient classes. I had hoped to just phase these out in favor of > a more unified system > > The *intent* was to have the recommended class behave the same as a user > with

Re: Restriction classes and ldap groups

2013-10-17 Thread Carlos R Laguna
El 17/10/13 11:21, Dominik George escribió: > Dominik George schrieb: > >>> Viktor Dukhovni schrieb: > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > LDAP is not SQL, and inverse relations (groups of user, rather > > than > users of group) are very difficult to

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dominik George schrieb: >>> Viktor Dukhovni schrieb: >>> > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >>> > LDAP is not SQL, and inverse relations (groups of user, rather >than >>> > users of group) are very difficult to expre

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >> Viktor Dukhovni schrieb: >> > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >> > LDAP is not SQL, and inverse relations (groups of user, rather than >> > users of group) are very difficult to express. On second thought, Viktor

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Carlos R Laguna schrieb: >Dominik George you mind to explain yourseld a little more further. If your LDAP users are regular system users, i.e., have the posixAccount class, and your mail servers uses them for local authentication, then obviously,

Re: Restriction classes and ldap groups

2013-10-17 Thread Carlos R Laguna
El 17/10/13 10:25, Dominik George escribió: > Viktor Dukhovni schrieb: > > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > > LDAP is not SQL, and inverse relations (groups of user, rather than > > users of group) are very difficult to express. > > Whereas, if the LDAP users are

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Viktor Dukhovni schrieb: >On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >LDAP is not SQL, and inverse relations (groups of user, rather than >users of group) are very difficult to express. Whereas, if the LDAP users are system us

Re: Restriction classes and ldap groups

2013-10-17 Thread Viktor Dukhovni
On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > Hello everyone, for a while now i have ben using ldap groups to create > restriccion classes for manage the access of my users like this > > correose_search_base = ou=Groups,dc=jovenclub,dc=cu > correose_query_filter = (&(|(cn=Cor

Re: Restriction Classes

2008-11-11 Thread Kevin P. Knox
On Tuesday 11 November 2008 12:01, Noel Jones wrote: > Kevin P. Knox wrote: > > On Tuesday 11 November 2008 11:29, Noel Jones wrote: > >> Kevin P. Knox wrote: > >>> If you all would be so kind, I need a "pointer" in the general > >>> direction. I think I'm on the right track, but here's the situati

Re: Restriction Classes

2008-11-11 Thread Noel Jones
Kevin P. Knox wrote: On Tuesday 11 November 2008 11:29, Noel Jones wrote: Kevin P. Knox wrote: If you all would be so kind, I need a "pointer" in the general direction. I think I'm on the right track, but here's the situation. I have a Postfix server that performs SMTP relay services ONLY. I

Re: Restriction Classes

2008-11-11 Thread Wietse Venema
Kevin P. Knox: > My Postfix server is running 2.2.10, so I don't "think" I can use CIDRs, but > can possibly list the internal servers as 32 bit addresses? CDIR table lookups were introduced with Postfix 2.1. Wietse

Re: Restriction Classes

2008-11-11 Thread Kevin P. Knox
On Tuesday 11 November 2008 12:01, Noel Jones wrote: > Kevin P. Knox wrote: > > On Tuesday 11 November 2008 11:29, Noel Jones wrote: > >> Kevin P. Knox wrote: > >>> If you all would be so kind, I need a "pointer" in the general > >>> direction. I think I'm on the right track, but here's the situati

Re: Restriction Classes

2008-11-11 Thread Kevin P. Knox
On Tuesday 11 November 2008 11:29, Noel Jones wrote: > Kevin P. Knox wrote: > > If you all would be so kind, I need a "pointer" in the general direction. > > I think I'm on the right track, but here's the situation. > > > > I have a Postfix server that performs SMTP relay services ONLY. It > > re

Re: Restriction Classes

2008-11-11 Thread Noel Jones
Kevin P. Knox wrote: If you all would be so kind, I need a "pointer" in the general direction. I think I'm on the right track, but here's the situation. I have a Postfix server that performs SMTP relay services ONLY. It relays for about six domain names. Final delivery of these six domains

Re: Restriction classes

2008-08-27 Thread mouss
Ralf Hildebrandt wrote: If a smtpd_restriction_class return NEITHER OK NOR REJECT, what happens? Postfix continues in the "calling" set of restrictions? as in check_mumble_access and the like, the default is to continue. restriction classes are simply a "holder" (you can replace them by their

Re: Restriction classes

2008-08-27 Thread Ralf Hildebrandt
* Ralf Hildebrandt <[EMAIL PROTECTED]>: > If a smtpd_restriction_class return NEITHER OK NOR REJECT, what > happens? Postfix continues in the "calling" set of restrictions? Somebody built a testcase on the German lists, and yes, Postfix continues in the "calling" set of restrictions -- Ralf Hild

Re: Restriction classes with null sender

2008-08-21 Thread Brian Evans - Postfix List
mouss wrote: > Brian Evans - Postfix List wrote: >> [snip] >> >> ndr_only = check_recipient_access hash:/etc/postfix/ndr_senders,reject >> > > if you want to check the recipient, rename your map. > if you want to check the sender, rename your check. > >> $ cat /etc/postfix/ndr_senders >> <> OK

Re: Restriction classes with null sender

2008-08-21 Thread mouss
Brian Evans - Postfix List wrote: [snip] ndr_only = check_recipient_access hash:/etc/postfix/ndr_senders,reject if you want to check the recipient, rename your map. if you want to check the sender, rename your check. $ cat /etc/postfix/ndr_senders <> OK This will never match a recipi

Re: Restriction classes with null sender

2008-08-21 Thread Noel Jones
Brian Evans - Postfix List wrote: Noel Jones wrote: Brian Evans - Postfix List wrote: I want a single account to only accept NDRs. Other email should be rejected. Would the following work correctly? smtpd_recipient_restrictions: ... check_recipient_access hash:/etc/postfix/receieve_only ...

Re: Restriction classes with null sender

2008-08-21 Thread Brian Evans - Postfix List
Noel Jones wrote: > Brian Evans - Postfix List wrote: >> I want a single account to only accept NDRs. Other email should be >> rejected. >> >> Would the following work correctly? >> >> smtpd_recipient_restrictions: >> ... >> check_recipient_access hash:/etc/postfix/receieve_only >> ... >> >> /etc/p

Re: Restriction classes with null sender

2008-08-19 Thread Noel Jones
Brian Evans - Postfix List wrote: I want a single account to only accept NDRs. Other email should be rejected. Would the following work correctly? smtpd_recipient_restrictions: ... check_recipient_access hash:/etc/postfix/receieve_only ... /etc/postfix/receieve_only: [EMAIL PROTECTED] check