On 02/22/10 21:32, Nathan Lager wrote:
>
>
> On 02/22/2010 04:14 PM, Nigel Kukard wrote:
> >> smtpd_recipient_restrictions = permit_mynetworks,
> >> reject_unauth_destination, check_policy_service inet:127.0.0.1:10031
> >> smtpd_end_of_data_restrictions = check_policy_service
> inet:127.0.0.1:10031
>
> > permit_mynetworks will cause any hosts in mynetworks to bypass the
> > policy check, I hope this is what you want.
>
>
> If i remote mynetworks, i'm unable to relay, no?

Do you not mean "remove"?  if you permit BEFORE the policy check, you
will never get to the policy check. Permit AFTER it maybe?


> Or should it be in a different order?

You've not told us what you wish to accomplish, so its pretty much
impossible for me to say if you want it before or after.

If you permit BEFORE , you won't get a policy check, because you're
unconditionally accepting the message. If you permit AFTER, you will get
a policy check for mynetworks ... it all depends what you wish to
accomplish with your configuration.


>
> >>
> >>
> >> My /etc/cluebringer.conf has the following regarding logging (which i
> >> enabled while troubleshooting, out of the box, it was disabled
> completely.
> >>
> >> # Log level:
> >> # 0 - Errors only
> >> # 1 - Warnings and errors
> >> # 2 - Notices, warnings, errors
> >> # 3 - Info, notices, warnings, errors
> >> # 4 - Debugging
> >> log_level=4
> >>
> >> # File to log to instead of stdout
> >> log_file=/var/log/cbpolicyd.log
> >>
>
> > You're missing the line with what to log, there is another log option
> > which lists all the various portions of the policyd internals.
>
> > -N
>
> I don't see another option documented in the config file. There is one
> more log related config option which i admittedly missed in my last paste.
>
> log_mail=maillog

Line 99 of cluebringer.conf included in the verbatim source shows...

#log_detail=

And above it a full explanation for its value...

# Things to log in extreme detail
# modules       - Log detailed module running information
# tracking      - Log detailed tracking information
# policies      - Log policy resolution
# protocols     - Log general protocol info, but detailed
# bizanga       - Log the bizanga protocol
#
# There is no default for this configuration option. Options can be
# separated by commas. ie. protocols,modules


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to