* Bob Apthorpe <[EMAIL PROTECTED]>: > > > reject_unknown_hostname drops connections from machines without DNS A or > > > MX record (twitchy) > > > > No. This rejects mail from machines that use a non-resolving hostname > > as argument to the EHLO/HELO. > > Rather, no rDNS (PTR)?
Yep. It must resolve forwards and backwards, otherwise it's "unknown". The ffd thing restricts that a mail with an aol.com sender comes from a client in the aol.com domain. Not very fine grained, but OK. > > It should. Note that it only whitelists by the HELO/EHLO argument. > > E.g. if a host uses > > wrong_syntax.domain.com > > as HELO, then whitelisting would be done using > > > > wrong_syntax.domain.com OK > > Hrm, things may be broken (still learning how to do access control with > hashes, etc.) /etc/postfix/moron_bypass contains: > > # Temporary bypass for legit but ill-mannered hosts > # [EMAIL PROTECTED], please fix your mailer > 2note1 OK > # Hotmail dimbulbs > 65.54.251.13 OK > mc5-s4.law1.hotmail.com OK > # Los Bastardos > # *.client.attbi.net > # __END__ > > The intent is to pass through the following: > > Jun 13 16:58:23 soyokaze postfix/smtpd[28302]: reject: RCPT from > unknown[65.54.251.13]: 450 <mc5-s4.law1.hotmail.com>: Helo command > rejected: Host not found; from=<> to=<[EMAIL PROTECTED]> Yes. "mc5-s4.law1.hotmail.com" is the HELO here. > Jun 25 22:10:29 soyokaze postfix/smtpd[14120]: reject: RCPT from > cs9356-145.austin.rr.com[24.93.56.145]: 504 <2note1>: Helo command > rejected: need fully-qualified hostname; from=<[EMAIL PROTECTED]> > to=<[EMAIL PROTECTED]> Ditto here. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus Mitte Tel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 AIM: ralfpostfix ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
