Re: smtp_*_restrictions and syntax access-files

2009-01-29 Thread Thomas Ackermann
Victor Duchovni schrieb: I can't honestly recommend anything other than start with the default: I suspect, you are right :) After another check of my logfiles, i reduced my restriction lists to the following: smtpd_client_restrictions = reject_unknown_reverse_client_hostname, check_clien

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread Victor Duchovni
On Thu, Jan 29, 2009 at 03:35:11AM +0100, Thomas wrote: > > Or would you add reject_unknown_sender_domain? It is already used in > "smptp_recipient_restrictions: > > > smtpd_recipient_restrictions = permit_mynetworks > reject_unknown_recipient_domain permit_sasl_authenticated > reject_unauth_de

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread Thomas
Victor Duchovni wrote: If you do that, you will notice that there is no documentation for "reject_unknown_address", hence you should not use it (there is no such restriction, if that is not clear by now). Uh. Thanx! I changed to the following: smtpd_sender_restrictions = check_sender_acces

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread Victor Duchovni
On Thu, Jan 29, 2009 at 01:09:08AM +0100, Thomas wrote: > hash:/etc/postfix/client_access > smtpd_sender_restrictions = reject_unknown_address check_sender_access > hash:/etc/postfix/sender_access Don't make stuff up. Keep it simple, and use only what you have understood after reading the corres

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread Thomas
ghe wrote: James Berwick wrote: From the documentation: check_client_access type:table Search the specified access database for the client hostname, parent domains, client IP address, or networks obtained by stripping least significant octets. See the access(5) manual page for details. Yo

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread ghe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Berwick wrote: > Thomas wrote: >> smtpd_client_restrictions = reject_invalid_hostname >> check_client_access hash:/etc/postfix/client_access >> >> /etc/postfix/client_access: >> REJECT >> >> But if i try to send a mail to an address listed in cl

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread Thomas
Thomas wrote: But if i try to send a mail to an address listed in client_access, it get happily queued and delivered :-( I suspect that i used the wrong restriction, the wrong hash/... thing or whatever ... Could you give a hint in the right direction? Found it: smtpd_recipient_restrictio

Re: smtp_*_restrictions and syntax access-files

2009-01-28 Thread James Berwick
Thomas wrote: smtpd_client_restrictions = reject_invalid_hostname check_client_access hash:/etc/postfix/client_access /etc/postfix/client_access: REJECT But if i try to send a mail to an address listed in client_access, it get happily queued and delivered :-( I suspect that i used the wron

smtp_*_restrictions and syntax access-files

2009-01-28 Thread Thomas
Hello, the command "postconf smtpd_client_restrictions smtpd_sender_restrictions" shows the following: smtpd_client_restrictions = reject_invalid_hostname check_client_access hash:/etc/postfix/client_access smtpd_sender_restrictions = reject_unknown_address check_sender_access hash:/etc/postf