On Thu, 28 Mar 2024, Philip Prindeville via users wrote:



On Mar 28, 2024, at 2:39 AM, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:

On 27.03.24 20:56, Philip Prindeville via users wrote:
I have something that looks like:

whitelist_from_rcvd v...@yandex.ru vger.kernel.org

blacklist_from *@yandex.ru

And I only ever seem to see the 2nd rule being hit, but not the first.


[snip..]


My config also has:

trusted_networks 192.168.6.0/24
trusted_networks 192.168.8.0/24
trusted_networks 127.0.0.1/32

So I don't think that's the problem.

What are some steps to troubleshoot how the white/black-listing is happening?

whitelist_from_rcvd requires SA to 'see' the envelope from address.
Depending on how you have SA glued into your MTA that may not be happening and may require particular configurations.

Try creating an entry for a known good address and see if it fires.

If that source properly DKIM or SPF signs its messages it may be easier to use 'whitelist_auth' instead of whitelist_from_rcvd.

It's also less maintenance headache as whitelist_from_rcvd must have the proper DNS names of their exit-point SMTP servers and in Cloud land that can change with out notice.

--
Dave Funk                               University of Iowa
<dbfunk (at) engineering.uiowa.edu>     College of Engineering
319/335-5751   FAX: 319/384-0549        1256 Seamans Center, 103 S Capitol St.
Sys_admin/Postmaster/cell_admin         Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

Reply via email to