[pfx] Re: smtpd_recipient_restrictions

2024-09-17 Thread Viktor Dukhovni via Postfix-users
On Tue, Sep 17, 2024 at 07:20:18PM +0800, Wesley via Postfix-users wrote: > > > Viktor Dukhovni via Postfix-users : > > - Just inbound mail from external sources? Or also other mail (locally > >submitted or generated)? > > yes I just reject message to that user from external source via smtp

[pfx] Re: smtpd_recipient_restrictions

2024-09-17 Thread Wesley via Postfix-users
Viktor Dukhovni via Postfix-users : - Just inbound mail from external sources? Or also other mail (locally submitted or generated)? yes I just reject message to that user from external source via smtp, does that setting work? - What is the address class of "domain.com"? sorry what

[pfx] Re: smtpd_recipient_restrictions

2024-09-16 Thread Viktor Dukhovni via Postfix-users
On Tue, Sep 17, 2024 at 01:24:01PM +1000, Viktor Dukhovni wrote: > Makefile: > # Or (.cdb, ...) depending on the default database type > DBEXT = db > WANTS = recipient-access.${DBEXT} > > .SUFFIXES: > .SUFFIXES: .${DBEXT} > > all: ${WANTS} > > %.${DBEXT}: % >

[pfx] Re: smtpd_recipient_restrictions

2024-09-16 Thread Viktor Dukhovni via Postfix-users
On Tue, Sep 17, 2024 at 06:38:15AM +0800, Wesley via Postfix-users wrote: > I want to deny all messages for a local user. > if I setup policy like this: > > smtpd_recipient_restrictions = hash:/etc/postfix/recipient-access > > in recipient-access: > > u...@domain.co

[pfx] smtpd_recipient_restrictions

2024-09-16 Thread Wesley via Postfix-users
Hello I want to deny all messages for a local user. if I setup policy like this: smtpd_recipient_restrictions = hash:/etc/postfix/recipient-access in recipient-access: u...@domain.com reject Will this work? if not, what's the right syntax? Thank you. -- https://wespeng.page

[pfx] Re: How to check whether "smtpd_recipient_restrictions"entries get parsed?

2024-08-07 Thread Wietse Venema via Postfix-users
Martin Stenzel via Postfix-users: > > Thank you, but I want to know about the last of the rules that was > applied to an email, not the general configuration. Output from this command: postconf smtpd_recipient_restrictions That is what gets parsed. If you want to test what happe

[pfx] Re: How to check whether "smtpd_recipient_restrictions"entries get parsed?

2024-08-07 Thread Martin Stenzel via Postfix-users
my main.cf file > > smtpd_recipient_restrictions = check_recipient_access > pcre:/etc/postfix/recipient_access.pcre, permit_mynetworks, > permit_sasl_authenticated, permit_dnswl_client > 626cf513f08bea5051b8c928c93b99.white.mail.abusix.zone, > reject_unauth_destination

[pfx] Re: How to check whether "smtpd_recipient_restrictions"entries get parsed?

2024-08-07 Thread Ansgar Wiechers via Postfix-users
On 2024-08-07 Martin Stenzel via Postfix-users wrote: > this is part of my main.cf file > > smtpd_recipient_restrictions = check_recipient_access > pcre:/etc/postfix/recipient_access.pcre, permit_mynetworks, > permit_sasl_authenticated, permit_dnswl_client > 626cf513f08b

[pfx] How to check whether "smtpd_recipient_restrictions"entries get parsed?

2024-08-07 Thread Martin Stenzel via Postfix-users
Hi dear team, this is part of my main.cf file smtpd_recipient_restrictions = check_recipient_access pcre:/etc/postfix/recipient_access.pcre, permit_mynetworks, permit_sasl_authenticated, permit_dnswl_client 626cf513f08bea5051b8c928c93b99.white.mail.abusix.zone, reject_unauth_destination

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Togan Muftuoglu via Postfix-users
> "MU" == Matus UHLAR <- fantomas via Postfix-users > > writes: MU> I have tried to explain it before: you should not use DNSBLs in MU> submission/smtps services, as you can expect many your clients to MU> connect from shared or dynamic IP addresses, which are surelly listed

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
=$mua_sender_restrictions -o smtpd_recipient_restrictions=$mua_recipient_restrictions -o smtpd_relay_restrictions=permit_sasl_authenticated,reject submissions inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Mark via Postfix-users
smtpd_recipient_restrictions=$mua_recipient_restrictions -o smtpd_relay_restrictions=permit_sasl_authenticated,reject submissions inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_sender_restrictions=$mua_sender_restrictions -o

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
On 05.02.24 15:46, Mark wrote: Thanks for the idea below. I'm going to try wrapping them in $mua in main.cf . However, you said; "Looking at your smtpd_recipient_restrictions and using reject_rbl_client, you need to override them too." I really didn't get this, by &q

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Mark via Postfix-users
Hi Matus, Thanks for the idea below. I'm going to try wrapping them in $mua in main.cf . However, you said; "Looking at your smtpd_recipient_restrictions and using reject_rbl_client, you need to override them too." I really didn't get this, by "overriding" co

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
_auth_only=yes -o smtpd_sender_restrictions=permit_sasl_authenticated,reject -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -o smtpd_relay_restrictions=permit_sasl_authenticated,reject smtps inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_a

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-04 Thread Mark via Postfix-users
sasl_authenticated,reject -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -o smtpd_relay_restrictions=permit_sasl_authenticated,reject smtps inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_s

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-04 Thread Viktor Dukhovni via Postfix-users
rictions= -o smtpd_sender_restrictions= -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o smtpd_recipient_restrictions= -o smtpd_data_restrictions= -o smtpd_end_of_data_restrictions= -o milter_macro_daemon_name=ORIGINATING -o smtpd_milters=$mua_milters

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-04 Thread Mark via Postfix-users
26:20AM +0300, Mark via Postfix-users wrote: > > > I'm trying to adjust my smtpd_recipient_restrictions so that any emails > > coming to a non-existent account on my server would be rejected BEFORE > the > > attempt reaches RBLs/RBL queries. > >

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-02 Thread Viktor Dukhovni via Postfix-users
On Fri, Feb 02, 2024 at 08:26:20AM +0300, Mark via Postfix-users wrote: > I'm trying to adjust my smtpd_recipient_restrictions so that any emails > coming to a non-existent account on my server would be rejected BEFORE the > attempt reaches RBLs/RBL queries. If you're using P

[pfx] Adjusting smtpd_recipient_restrictions

2024-02-01 Thread Mark via Postfix-users
Greetings. I'm trying to adjust my smtpd_recipient_restrictions so that any emails coming to a non-existent account on my server would be rejected BEFORE the attempt reaches RBLs/RBL queries. Thus, before I activate my settings, I wanted to ask for your opinions, so here how it

RE: smtpd_recipient_restrictions usage question.

2022-06-25 Thread Gary Smith
ll, just this remote call portion. > -Original Message- > From: owner-postfix-us...@postfix.org > On Behalf Of Matus UHLAR - fantomas > Sent: Saturday, June 25, 2022 7:25 AM > To: postfix-users@postfix.org > Subject: Re: smtpd_recipient_restrictions usage question. >

Re: smtpd_recipient_restrictions usage question.

2022-06-25 Thread Viktor Dukhovni
s >   >     -o smtpd_helo_restrictions=  >     -o smtpd_client_restrictions=  >     -o smtpd_sender_restrictions=  >     -o smtpd_relay_restrictions=reject_unknown_recipient_domain  >     -o smtpd_recipient_restrictions=permit_mynetworks,reject  >     -o smtp

Re: smtpd_recipient_restrictions usage question.

2022-06-25 Thread Matus UHLAR - fantomas
tables for any host/mask values.   I’m using https://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions as a reference and it says not to use OK but DUNNO, which is a little confusing with what DUNNO says it does, which is what also prompted this question.  What’s the best app

Re: smtpd_recipient_restrictions usage question.

2022-06-24 Thread Nick Tait
#smtpd_recipient_restrictions as a reference and it says not to use OK but DUNNO, which is a little confusing with what DUNNO says it does, which is what also prompted this question.  What’s the best approach here? Hi Gary. I think the restriction you're looking for is check_client_access (r

smtpd_recipient_restrictions usage question.

2022-06-24 Thread Gary Smith
can I add subnets (10.20.30.0/24) or just single IPs?  I’m using https://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions as a reference and it says not to use OK but DUNNO, which is a little confusing with what DUNNO says it does, which is what also prompted this question.  What’s

Re: not working smtpd_recipient_restrictions implementation - postFIXED!

2021-06-02 Thread Eric Smith
sing postfix > > through this in main.cf > > > > smtpd_recipient_restrictions = permit_mynetworks, > > Postfix won't reject mail from your network. > > > permit_sasl_authenticated, > > Postfix won't reject mail from an authenti

Re: not working smtpd_recipient_restrictions implementation

2021-06-02 Thread Viktor Dukhovni
On Wed, Jun 02, 2021 at 06:55:26PM +0200, Eric Smith wrote: > My postfix ability has dissapated over many years without use :-( > > I tried and failing to REJECT an unwanted domain from accessing postfix > through this in main.cf > > smtpd_reci

Re: not working smtpd_recipient_restrictions implementation

2021-06-02 Thread Wietse Venema
Eric Smith: > Dear fixers, > > My postfix ability has dissapated over many years without use :-( > > I tried and failing to REJECT an unwanted domain from accessing postfix > through this in main.cf > > smtpd_recipient_restrictions = permit_mynetworks, Postfix won

Re: not working smtpd_recipient_restrictions implementation

2021-06-02 Thread postfix
On 06-02-2021 12:55 pm, Eric Smith wrote: Dear fixers, My postfix ability has dissapated over many years without use :-( I tried and failing to REJECT an unwanted domain from accessing postfix through this in main.cf Does anything show in the mail logs when it receives an email from the block

not working smtpd_recipient_restrictions implementation

2021-06-02 Thread Eric Smith
Dear fixers, My postfix ability has dissapated over many years without use :-( I tried and failing to REJECT an unwanted domain from accessing postfix through this in main.cf smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access

Re: Cache for smtpd_recipient_restrictions????

2021-03-30 Thread Noel Jones
On 3/30/2021 8:17 AM, SysAdmin EM wrote: Hello, I would like to know if there is any way to implement cache for the smtpd_recipient_restrictions parameter? I use MySql to store a table full of non-existent users, which I was saving from email accounts that have been compromised by viruses

Cache for smtpd_recipient_restrictions????

2021-03-30 Thread SysAdmin EM
Hello, I would like to know if there is any way to implement cache for the smtpd_recipient_restrictions parameter? I use MySql to store a table full of non-existent users, which I was saving from email accounts that have been compromised by viruses on the PC. Any recommendation? Regards,

Re: smtpd_relay_restrictions and smtpd_recipient_restrictions evaluation order

2021-02-11 Thread Viktor Dukhovni
> On Feb 11, 2021, at 12:39 PM, Damian wrote: > > postconf(5) states that smtpd_relay_restrictions apply before > smtpd_recipient_restrictions. This seems incorrect since > postfix-3.3-20180106. https://github.com/vdukhovni/postfix/commit/237852e8312750799b548165c7e46a

smtpd_relay_restrictions and smtpd_recipient_restrictions evaluation order

2021-02-11 Thread Damian
Hello, postconf(5) states that smtpd_relay_restrictions apply before smtpd_recipient_restrictions. This seems incorrect since postfix-3.3-20180106. Regards  Damian

Re: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Wietse Venema
Gerald Galster: > <> is valid by definition and does not depend on mynetworks, besides you're > right that most external bounces are spam. The initial question was why > reject_non_fqdn_sender did not apply. The envelope sender address <> must not be blocked by reject_non_fqdn_sender. It would be

Re: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Gerald Galster
>>> Thanks, Gerald. I also have this in my main.cf configuration file: >>> smtpd_sender_restrictions = >>> permit_mynetworks, >>> reject_non_fqdn_sender, >>> reject_unknown_sender_domain, >>> check_client_access cidr:/etc/postfix/blacklist_cidr, >>> permit >>> Shouldn'

Re: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Benny Pedersen
Gerald Galster skrev den 2020-07-27 14:40: Thanks, Gerald. I also have this in my main.cf configuration file: smtpd_sender_restrictions = permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, check_client_access cidr:/etc/postfix/blacklist_cidr,

Re: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Gerald Galster
> Thanks, Gerald. I also have this in my main.cf configuration file: > > smtpd_sender_restrictions = >permit_mynetworks, >reject_non_fqdn_sender, >reject_unknown_sender_domain, >check_client_access cidr:/etc/postfix/blacklist_cidr, >permit > > Shouldn't the

RE: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Scott Hollenbeck
> -Original Message- > From: owner-postfix-us...@postfix.org > On Behalf Of Gerald Galster > Sent: Monday, July 27, 2020 6:47 AM > To: Postfix users > Subject: Re: smtpd_recipient_restrictions Failure? > > > > Lately I've been getting email sent

Re: smtpd_recipient_restrictions Failure?

2020-07-27 Thread Gerald Galster
> Lately I've been getting email sent from one persistent spammer that's > somehow getting through my smtpd_recipient_restrictions filters. Here are > the message headers: > > Return-Path: [...] > From:=?UTF-8?B?RGVybWFDb3JyZWN0?= [...] &g

Re: smtpd_recipient_restrictions in mongodb?

2020-07-14 Thread SysAdmin EM
Exactly. Here a typical row | 1382959 | nelly_cab...@gmail.com | REJECT Recipient address rejected for policy reasons | 2018-11-04 01:49:33 mysql> describe virtual_sender_access ; +---+-+--+-+-+-+ | Field | T

Re: smtpd_recipient_restrictions in mongodb?

2020-07-14 Thread Ralph Seichter
* SysAdmin EM: > query = SELECT access FROM virtual_sender_access WHERE source='%s' You wrote that you only store nonexistent sources. In that case, the value of the "access" column should always be something that indicates "access denied", possibly a constant value across all entries? If so,

Re: smtpd_recipient_restrictions in mongodb?

2020-07-13 Thread SysAdmin EM
BTREE || | +---++--+--+-+---+-+--++--++-+ ---+ 2 rows in set (0.00 sec) I would like to know if I can use mongo in the smtpd_recipient_restrictions parameter anyway. Tha

Re: smtpd_recipient_restrictions in mongodb?

2020-07-13 Thread Ralph Seichter
* SysAdmin EM: > I use a suppression list where I block domains and email accounts that > don't exist to prevent the reputation of my IP addresses from going > down. [...] The table currently has 4 million rows, so I am looking > for a faster database engine than MySql. Can you clarify for me: Yo

smtpd_recipient_restrictions in mongodb?

2020-07-13 Thread SysAdmin EM
Hello, I use a suppression list where I block domains and email accounts that don't exist to prevent the reputation of my IP addresses from going down. smtpd_recipient_restrictions = check_recipient_access mysql:/etc/postfix/ mysql-virtual-recipient-access.cf # connection to mysql hosts

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-19 Thread Viktor Dukhovni
On Thu, Dec 19, 2019 at 04:31:20AM -0700, postpeter wrote: > Hello Viktor, > thank you for suggested solution. I am not advanced postfix admin so it is > not easy to understand all and setup it quickly by above links. I posted a solution on the Postfix side, that works regardless of the local su

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-19 Thread Wietse Venema
postpeter: > Hello Viktor, > thank you for suggested solution. I am not advanced postfix admin so it is > not easy to understand all and setup it quickly by above links. > > Do you know some other way how to restrict emails sent from PHP on localhost > ? > For example can I force PHP to send emai

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-19 Thread postpeter
Hello Viktor, thank you for suggested solution. I am not advanced postfix admin so it is not easy to understand all and setup it quickly by above links. Do you know some other way how to restrict emails sent from PHP on localhost ? For example can I force PHP to send email through SMTP instead of

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-16 Thread Wietse Venema
postpeter: > Postfix log when email is sent from alpine: > > Dec 16 08:56:47 debian1 postfix/smtpd[14483]: connect from > localhost[127.0.0.1] > Dec 16 08:56:47 debian1 postfix/smtpd[14483]: 6F82C9E492: > client=localhost[127.0.0.1] > Dec 16 08:56:47 debian1 postfix/smtpd[14483]: disconnect from >

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-16 Thread postpeter
Postfix log when email is sent from alpine: Dec 16 08:56:47 debian1 postfix/smtpd[14483]: connect from localhost[127.0.0.1] Dec 16 08:56:47 debian1 postfix/smtpd[14483]: 6F82C9E492: client=localhost[127.0.0.1] Dec 16 08:56:47 debian1 postfix/smtpd[14483]: disconnect from localhost[127.0.0.1] ehlo=

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-15 Thread Viktor Dukhovni
On Sun, Dec 15, 2019 at 12:38:51PM -0700, postpeter wrote: > In my case check_recipient_access is functional for sending from remote > e-mail clients but when I test it with Alpine on the e-mail server or from > PHP code on the same server then it is ignored. Presumably, both Alpine and PHP perfo

Re: Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-15 Thread Wietse Venema
postpeter: > I want to restrict emails by recipient address with check_recipient_access. > > In my case check_recipient_access is functional for sending from remote > e-mail clients but when I test it with Alpine on the e-mail server or from > PHP code on the same server then it is ignored. You f

Postfix does not evaluate smtpd_recipient_restrictions when email is sent from localhost

2019-12-15 Thread postpeter
= permit_mynetworks check_sender_access hash:/etc/postfix/sender_access reject_rbl_client sbl.spamhaus.org reject_rbl_client cbl.abuseat.org reject_rbl_client bl.spamcop.net permit smtpd_recipient_restrictions = reject_unknown_sender_domain reject_unknown_recipient_domain check_recipient_access hash

Re: Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Andreas Thienemann
Hi Viktor, On Thu, 9 May 2019, Viktor Dukhovni wrote: On May 9, 2019, at 1:13 PM, Andreas Thienemann wrote: I have the following items in my config: http://www.postfix.org/DEBUG_README.html#mail fair enough... Problem description: smtpd_recipient_restrictions seems to be working

Re: Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Viktor Dukhovni
> On May 9, 2019, at 1:37 PM, Bastian Blank > wrote: > > Don't split restrictions into multiple lists. I disagree. Indeed as of Postfix 2.10 we have separate relay restrictions by default. The OP's problem will be evident once the "postconf -n" output is posted. -- Viktor.

Re: Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Viktor Dukhovni
> On May 9, 2019, at 1:13 PM, Andreas Thienemann wrote: > > I have the following items in my config: http://www.postfix.org/DEBUG_README.html#mail -- Viktor.

Re: Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Bastian Blank
Hi Andreas On Thu, May 09, 2019 at 07:13:22PM +0200, Andreas Thienemann wrote: > smtpd_recipient_restrictions = check_recipient_access > proxy:mysql:/etc/postfix/bounce_spam_alias.cf >check_recipient_access > proxy:mysql:/etc/postfix/bounce_route

Re: Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Bastian Blank
On Thu, May 09, 2019 at 07:13:22PM +0200, Andreas Thienemann wrote: > I was under the impression, that smtpd_recipient_restrictions and other > restriction configuration items were being processed top to bottom. Show logs. Show complete config. See http://www.postfix.org/DEBUG_README.htm

Trying to understand smtpd_recipient_restrictions order

2019-05-09 Thread Andreas Thienemann
Hi, I was under the impression, that smtpd_recipient_restrictions and other restriction configuration items were being processed top to bottom. I am running postfix 3.2.2 and as far as I can see my postfix is showing a different behavior. I have the following items in my config

Re: smtpd_recipient_restrictions reject_unknown_client_hostname

2019-03-15 Thread Francesc Peñalvez
thank you I had not thought that postfix followed the order of the list El 15/03/2019 a las 20:45, Matus UHLAR - fantomas escribió: On 15.03.19 20:37, Francesc Peñalvez wrote: I have this directive active reject_unknown_client_hostname and in some ips when it does not solve at the moment of doi

Re: smtpd_recipient_restrictions reject_unknown_client_hostname

2019-03-15 Thread Noel Jones
On 3/15/2019 2:37 PM, Francesc Peñalvez wrote: I have this directive active reject_unknown_client_hostname and in some ips when it does not solve at the moment of doing the RCPT it does not solve correctly, as it is logical send code 450 blocking the mail. Well my question is how could I put som

Re: smtpd_recipient_restrictions reject_unknown_client_hostname

2019-03-15 Thread Matus UHLAR - fantomas
On 15.03.19 20:37, Francesc Peñalvez wrote: I have this directive active reject_unknown_client_hostname and in some ips when it does not solve at the moment of doing the RCPT it does not solve correctly, as it is logical send code 450 blocking the mail. Well my question is how could I put some ip

smtpd_recipient_restrictions reject_unknown_client_hostname

2019-03-15 Thread Francesc Peñalvez
I have this directive active reject_unknown_client_hostname and in some ips when it does not solve at the moment of doing the RCPT it does not solve correctly, as it is logical send code 450 blocking the mail. Well my question is how could I put some ips in particular that I know are reliable for

Re: Ignore smtpd_recipient_restrictions list for one sender

2019-02-26 Thread Viktor Dukhovni
On Tue, Feb 26, 2019 at 02:45:52PM -0300, Emanuel wrote: > Hello, within the postfix configuration I have created a list of blocked > recipients. My question, it is possible to ignore this list for a one > sender.? > > smtpd_recipient_restrictions = > check_recipient_ac

Ignore smtpd_recipient_restrictions list for one sender

2019-02-26 Thread Emanuel
Hello, within the postfix configuration I have created a list of blocked recipients. My question, it is possible to ignore this list for a one sender.? smtpd_recipient_restrictions = check_recipient_access mysql:/etc/postfix/mysql-virtual-recipient-access.cf regexp:/etc/postfix

Re: unable to get smtpd_recipient_restrictions to work

2018-06-26 Thread Wietse Venema
gt; seems to work for this. > > Here's content from my main.cf file > > smtpd_recipient_restrictions = check_sender_access > hash:/etc/postfix/restricted_senders, permit_mynetworks, > permit_sasl_authenticated, reject_unauth_destination, check_policy_service > inet:127

unable to get smtpd_recipient_restrictions to work

2018-06-25 Thread Rajneesh Rana
in.cf file smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/restricted_senders, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_policy_service inet:127.0.0.1:10023, permit_auth_destination, reject smtpd_restriction_classes = local_only local_only = check_recipient_access

Re: why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread mj
On 03/23/2018 01:06 AM, Viktor Dukhovni wrote: Yes, but the right answer is turn off the webform until you can replace it with something that is not open to abuse. We will install a captcha tomorrow. (it's after midnight now) It's also not *that* harmful: they s u b s c r i b e to a wordpres

Re: why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread mj
On 03/23/2018 12:58 AM, mj wrote: Is there perhaps also another error code we can use, that blackholes the email, instead of politely bouncing it with a "Diagnostic-Code: X-Postfix; Destination domain blacklisted"? I just found the "discard" option. Thanks you again, Viktor! MJ

Re: why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread Viktor Dukhovni
> On Mar 22, 2018, at 7:58 PM, mj wrote: > > On 03/23/2018 12:42 AM, Viktor Dukhovni wrote: >> Almost certainly bounces, which did not come in via SMTP, they are originated >> locally, when inbound mail from mail.ru is undeliverable, and sent outbound >> via the smarthost. > Yes, they are origi

Re: why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread mj
Hi Viktor, On 03/23/2018 12:42 AM, Viktor Dukhovni wrote: Almost certainly bounces, which did not come in via SMTP, they are originated locally, when inbound mail from mail.ru is undeliverable, and sent outbound via the smarthost. Yes, they are originated locally, yes, using a webform that is cu

Re: why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread Viktor Dukhovni
> On Mar 22, 2018, at 7:35 PM, mj wrote: > > This postfix 2.9.6 from wheezy. I have added to main.cf: > >> smtpd_recipient_restrictions = check_recipient_access >> hash:/etc/postfix/blacklisted_domains, permit_mynetworks, >> reject_unauth_destination

why is smtpd_recipient_restrictions ignored..?

2018-03-22 Thread mj
Hi all, This postfix 2.9.6 from wheezy. I have added to main.cf: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blacklisted_domains, permit_mynetworks, reject_unauth_destination, permit and /etc/postfix/blacklisted_domains contains just one line: mail.ru

Re: Question regarding smtpd_recipient_restrictions

2017-12-23 Thread Bill Cole
On 21 Dec 2017, at 18:06 (-0500), Doe wrote: In the case of a server that receives mail for a domain and also allows clients to send mail through it (via AUTH’d clients), does smtpd_recipent_restrictions apply to recipients at the domain or to recipients of mail sent by the AUTH’d clients or b

Re: Question regarding smtpd_recipient_restrictions

2017-12-21 Thread Wietse Venema
J Doe: > Hi, > > I have a basic question regarding the smtpd_recipient_restrictions parameter. > > From what I understand, these are restrictions applied to the SMTP > RCP TO command. > > In the case of a server that receives mail for a domain and also > allows clie

Question regarding smtpd_recipient_restrictions

2017-12-21 Thread J Doe
Hi, I have a basic question regarding the smtpd_recipient_restrictions parameter. From what I understand, these are restrictions applied to the SMTP RCP TO command. In the case of a server that receives mail for a domain and also allows clients to send mail through it (via AUTH’d clients

smtpd_recipient_restrictions and smtpd_relay_restrictions difference ??

2017-08-17 Thread Fazzina, Angelo
Hi, I am reading "man 5 postconf" of version 2.10.1 I am building new server with it, from old 2.6.6. My question is my server with 2.6 has smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/maps/block_to, permit_mynetworks, permit_sasl_aut

RE: postscreen dnsbl AND smtpd_recipient_restrictions rbl?

2017-07-15 Thread Scott Techlist
>This looks similar to my own config, from which I think Steve adapted his. I >presume therefore that you're using a threshold of 3? Yes. >SWL is no longer active; the zone has been emptied. Check. Thanks. >> reject_rbl_client bl.spamcop.net >> reject_rbl_client psbl.surriel.com > >I would

Re: postscreen dnsbl AND smtpd_recipient_restrictions rbl?

2017-07-15 Thread /dev/rob0
On Sat, Jul 15, 2017 at 10:30:25AM -0700, techlist06 wrote: > I'm converting to use postscreen. I have a question about dnsbl's > in postscreen vs smtpd_recipient_restrictions > > Following threads here and a git by Steve Jenkins I was going to > start

postscreen dnsbl AND smtpd_recipient_restrictions rbl?

2017-07-15 Thread techlist06
I'm converting to use postscreen. I have a question about dnsbl's in postscreen vs smtpd_recipient_restrictions Following threads here and a git by Steve Jenkins I was going to start with this for postscreen: postscreen_dnsbl_sites = zen.spamhaus.org*3 bl.mails

Re: Postfix ignoring order of smtpd_recipient_restrictions

2017-07-11 Thread Darren Share
.X.X]: 450 4.1.8 >> : Sender address rejected: Domain not >> found; from= to= >> proto=ESMTP helo= >> >> I've added em...@mispelt-domain.co.uk OK to /etc/postfix/sender_access, >> ran postmap /etc/postfix/sender_access and restarted postfix. >>

Re: Postfix ignoring order of smtpd_recipient_restrictions

2017-07-11 Thread Alex JOST
s and restarted postfix. Despite check_sender_access hash:/etc/postfix/sender_access appearing in my smtpd_recipient_restrictions list before reject_unknown_sender_domain the emails are still being rejected for that reason. Why is this and how can I fix it? Postfix v2.11.3 Output

Postfix ignoring order of smtpd_recipient_restrictions

2017-07-11 Thread Darren Share
der_access hash:/etc/postfix/sender_access appearing in my smtpd_recipient_restrictions list before reject_unknown_sender_domain the emails are still being rejected for that reason. Why is this and how can I fix it? Postfix v2.11.3 Output of postconf -n: alias_database = hash:/etc/aliases al

Re: Problem with spam and some connections not using my smtpd_recipient_restrictions

2017-05-06 Thread Wietse Venema
Noel Jones: > A lot of the folks that might help are unwilling to visit a webpage. > > Please send the information about the problem system directly to the > list. > > Do not post debug logs unless specifically requested. Note that your verbose logging is incomplete. For example, after about 200

Re: Problem with spam and some connections not using my smtpd_recipient_restrictions

2017-05-06 Thread Noel Jones
On 5/6/2017 10:04 AM, Steve Kuekes wrote: > Hello, > > I have a problem with spam. Some connections do not seem to run my > smtpd_recipient_restrictions and therefore let spam into my system. > Specifically my rbl checks. I have 2 logs from the same postfix > system. One y

Problem with spam and some connections not using my smtpd_recipient_restrictions

2017-05-06 Thread Steve Kuekes
Hello, I have a problem with spam. Some connections do not seem to run my smtpd_recipient_restrictions and therefore let spam into my system. Specifically my rbl checks. I have 2 logs from the same postfix system. One you can see the rbl checks being done and one where it doesn't ru

Re: smtpd_recipient_restrictions with ldap

2017-04-07 Thread Paolo Barbato
Hi, waiting for CGPro upcoming release with promised search fixing, I've sorted out the warning: dict_ldap_lookup: Search error 1: Operations error, adding a domain= list of my internal domains in ldaprfx.cf, and so stopping mail=%s expansion . In main.cf I’ve added proxy:ldap:/opt/trend/imss

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Paolo Barbato
> On 5 Apr 2017, at 01:21, Brett @Google wrote: > > On Wed, Apr 5, 2017 at 5:35 AM, Paolo Barbato > wrote: > > I've anyway just receive a feedback from CGPro developers that I share as > promised: > >> For 6.2c3 (later this April): >> LDAP: search for non-rou

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Paolo Barbato
> On 5 Apr 2017, at 01:08, Viktor Dukhovni wrote: > > >> On Apr 4, 2017, at 3:35 PM, Paolo Barbato wrote: >> >> here new ldaprfx.cf >> >> server_host = 150.178.3.89:389 >> bind=no >> search_base = mail=%s,dc=cgprouter >> scope = base >> query_filter = mail=%s >> result_attribute = mail >> re

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Brett @Google
On Wed, Apr 5, 2017 at 5:35 AM, Paolo Barbato wrote: > > I've anyway just receive a feedback from CGPro developers that I share as > promised: > > For 6.2c3 (later this April): > LDAP: search for non-routable address under the dc=cgprouter base now > returns empty result rather than routing error

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Viktor Dukhovni
> On Apr 4, 2017, at 3:35 PM, Paolo Barbato wrote: > > here new ldaprfx.cf > > server_host = 150.178.3.89:389 > bind=no > search_base = mail=%s,dc=cgprouter > scope = base > query_filter = mail=%s > result_attribute = mail > result_format = OK %s > version = 3 > > here postmap check > [root@ma

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Paolo Barbato
aps $sender_canonical_maps >$recipient_canonical_maps $relocated_maps $transport_maps $mynetworks >$smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps >$smtp_generic_maps $lmtp_generic_maps $alias_maps > $smtpd_client_restrictions >$sm

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Viktor Dukhovni
t_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps $smtpd_client_restrictions $smtpd_helo_restrictions $smtpd_sender_restrictions $smtpd_relay_restrictions $smtpd_recipient_restrictions which covers all the tables listed in the various restriction lists. -- Viktor.

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Paolo Barbato
Hi Viktor, Il giorno 04/apr/2017, alle ore 18.02, Viktor Dukhovni ha scritto: > On Tue, Apr 04, 2017 at 08:48:33AM +0200, Paolo Barbato wrote: > >> I’m using following rules in main.cf >> >> smtpd_recipient_restrictions = >> permit_mynetworks, >>

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Viktor Dukhovni
On Tue, Apr 04, 2017 at 04:02:34PM +, Viktor Dukhovni wrote: > > Here what ldapsearch returns: > > > > ldapsearch -v -LLL -h -b"dc=cgprouter" -x -s one 'mail=notexist@xx' > > ldap_initialize( ldap://xxx) > > filter: mail=notexist@xxx > > requesting: All userApplication attributes > > No s

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Viktor Dukhovni
On Tue, Apr 04, 2017 at 08:48:33AM +0200, Paolo Barbato wrote: > I’m using following rules in main.cf > > smtpd_recipient_restrictions = > permit_mynetworks, > check_recipient_access > regexp:/opt/trend/imss/postfix/etc/postfix/access, > rej

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Christian Rößner
> Am 04.04.2017 um 17:22 schrieb Viktor Dukhovni : > > >> On Apr 4, 2017, at 10:53 AM, Christian Rößner >> wrote: >> >>> smtpd_recipient_restrictions = >> ... >>> ldap:ldaprfx, >> ... >> >> Maybe I am wrong, but aren&#x

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Viktor Dukhovni
> On Apr 4, 2017, at 10:53 AM, Christian Rößner > wrote: > >> smtpd_recipient_restrictions = > ... >> ldap:ldaprfx, > ... > > Maybe I am wrong, but aren't you missing a keyword here? Something like > check_sender_access or check_recipient_access o

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Christian Rößner
tconf) under smtpd_recipient_restrictions. I do not see that your config is valid. >> ... >> check_XYZ_access ldap:ldaprfx, >> ... Give it a try and report back Christian -- Erlenwiese 14, 36304 Alsfeld T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345 smime.p7s Des

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Paolo Barbato
tml> Regards, Paolo. > On 4 Apr 2017, at 16:53, Christian Rößner > wrote: > > Hi, > >> Am 04.04.2017 um 08:48 schrieb Paolo Barbato : >> >> smtpd_recipient_restrictions = > ... >> ldap:ldaprfx, > ... > > Maybe I am wrong, but aren't you mi

  1   2   3   4   5   >