[Postfixbuch-users] Whitelist und smtpd_recipient_restrictions

[Udo Neist]

Am Mittwoch November 17 2004 11:59 schrieb Ralf Hildebrandt:
> * Udo Neist <postfix at singollo.de>:
> > smtpd_client_restrictions = permit_mynetworks,
> > reject_invalid_hostname
>
> reject_invalid_hostname ist keine Client restriction.
>
> > smtpd_helo_restrictions = permit_mynetworks,
> > reject_non_fqdn_hostname
>
> Was ist denn der genaue Logeintrag??
>
> Besser:
>
> smtpd_recipient_restrictions =
>    permit_mynetworks
>    permit_sasl_authenticated
>    reject_unauth_destination
>    reject_invalid_hostname
>    reject_non_fqdn_hostname
>    ... der Rest ...
>
> und smtpd_helo_restrictions und smtpd_client_restrictions
> leerlassen

/var/log/mail:

Nov 17 10:09:52 h8239 postfix/smtpd[19288]: starting TLS engine
Nov 17 10:10:02 h8239 postfix/smtpd[19288]: connect from 
unknown[195.248.137.154]
Nov 17 10:10:02 h8239 postfix/smtpd[19288]: 49B847E8021: 
client=unknown[195.248.137.154]
Nov 17 10:10:02 h8239 postfix/smtpd[19288]: 49B847E8021: reject: 
RCPT from unknown[195.248.137.154]: 504 <MPL-05>: Helo command 
rejected: need fully-qualified hostname; from=<ct at exis-ag.de> 
to=<weinbauer at singollo.de> proto=ESMTP helo=<MPL-05>
Nov 17 10:10:03 h8239 postfix/smtpd[19288]: disconnect from 
unknown[195.248.137.154]

Das andere korriger ich mal schnell... 

smtpd_recipient_restrictions = permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        reject_invalid_hostname,
        reject_non_fqdn_hostname,
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_rbl_client   dul.dnsbl.sorbs.net,
        reject_rbl_client   ix.dnsbl.manitu.net,
        reject_rbl_client   cbl.abuseat.org,
        reject_rbl_client   sbl.spamhaus.org,
        reject_rbl_client   list.dsbl.org,
        reject_rbl_client   relays.ordb.org,
        reject_rbl_client   opm.blitzed.org,
        reject_rbl_client   ix.dnsbl.manitu.net

smtpd_client_restrictions und smtpd_helo_restrictions habe ich 
auskommentiert.

Gruß
Udo
-- 
panic("huh?\n");
	2.2.16 /usr/src/linux/arch/i386/kernel/smp.c