Re: Relay Exceptions

2013-01-25 Thread Noel Jones
On 1/25/2013 4:29 AM, Jamie Paul Griffin wrote: > * Noel Jones [2013-01-23 12:37:28 -0600]: > >> On 1/23/2013 12:30 PM, Tom Tucker wrote: >>> >>> I think I got it. The ordering is critical. Thanks >>> >>> >>> smtpd_recipient_restrictions = >>> check_recipient_access hash:/etc/postfix/re

Re: Relay Exceptions

2013-01-25 Thread Jamie Paul Griffin
* Noel Jones [2013-01-23 12:37:28 -0600]: > On 1/23/2013 12:30 PM, Tom Tucker wrote: > > > > I think I got it. The ordering is critical. Thanks > > > > > > smtpd_recipient_restrictions = > > check_recipient_access hash:/etc/postfix/relay_domains # > > This will allow clients missing

Re: Relay Exceptions

2013-01-23 Thread Noel Jones
On 1/23/2013 1:19 PM, Tom Tucker wrote: > You mentioned that"The above disables all your UCE controls." > You say this because of the order of the rules, right? Your first rule is equivalent to permit_auth_destination. After that, the only mail left is either mail from unauthorized clients t

Re: Relay Exceptions

2013-01-23 Thread Tom Tucker
On Wed, Jan 23, 2013 at 1:31 PM, Noel Jones wrote: > On 1/23/2013 10:21 AM, Tom Tucker wrote: > > > > Stan, > > Thanks for the response. This does work, however these clients are > > also able to send to domains outside my environment. Let me try to > > clarify my scenario. > > > > Client: With

Re: Relay Exceptions

2013-01-23 Thread Noel Jones
On 1/23/2013 12:30 PM, Tom Tucker wrote: > > I think I got it. The ordering is critical. Thanks > > > smtpd_recipient_restrictions = > check_recipient_access hash:/etc/postfix/relay_domains # > This will allow clients missing PTR records the ability to relay locally > reject_u

Re: Relay Exceptions

2013-01-23 Thread Noel Jones
On 1/23/2013 10:21 AM, Tom Tucker wrote: > > Stan, > Thanks for the response. This does work, however these clients are > also able to send to domains outside my environment. Let me try to > clarify my scenario. > > Client: With PTR record = Full relay (internal & external domains) > Client: No

Re: Relay Exceptions

2013-01-23 Thread Tom Tucker
I think I got it. The ordering is critical. Thanks smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/relay_domains # This will allow clients missing PTR records the ability to relay locally reject_unknown_reverse_client_hostname # Reject all other client

Re: Relay Exceptions

2013-01-23 Thread Tom Tucker
Stan, Thanks for the response. This does work, however these clients are also able to send to domains outside my environment. Let me try to clarify my scenario. Client: With PTR record = Full relay (internal & external domains) Client: No PTR record = Relay for internal domains only Is it pos

Re: Relay Exceptions

2013-01-23 Thread Stan Hoeppner
On 1/22/2013 8:52 PM, Tom Tucker wrote: > I am struggling with a configuration that might be impossible. Hopefully > the list can help guide me. > > I want to allow internal systems the ability to relay emails to my domains > even though they might get caught with > 'reject_unknown_reverse_client

Relay Exceptions

2013-01-22 Thread Tom Tucker
I am struggling with a configuration that might be impossible. Hopefully the list can help guide me. I want to allow internal systems the ability to relay emails to my domains even though they might get caught with 'reject_unknown_reverse_client_hostname'. Possible? If yes, I am unsure how to