From LedHed's Wiki
Jump to: navigation, search
 
 
(8 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
These restrictions are useful for accepting, rejecting and even routing messages.
  
== SMTPD_Recipient_Restrictions ==
+
Reference: [http://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions smtpd_recipient_restrictions] in the postfix documentation
  
 +
'''Example:'''
 +
<br>
 +
smtpd_sasl_auth_enable = yes
 +
broken_sasl_auth_clients = yes
 +
smtpd_sasl_security_options = noanonymous
 +
smtpd_recipient_restrictions =
 +
      permit_mynetworks
 +
      permit_sasl_authenticated
 +
      reject_unauth_destination
 +
      reject_unlisted_recipient
 +
      check_client_access pcre:/etc/postfix/spam-filter.cf
  
[[Category|Postfix]]
+
<br>
 +
'''NOTES:'''
 +
<br>
 +
'''[http://www.postfix.org/postconf.5.html#smtpd_reject_unlisted_recipient reject_unlisted_recipient]''' ''The best thing since sliced bread!''<br>
 +
It will reject mail where the recipient domain is listed in Virtual_Mailbox_Domains but the recipient is not listed in Virtual_Mailbox_Maps. You would think this goes without saying, but this isn't the default behavior. When in doubt add this line!<br>
 +
 
 +
'''[http://www.postfix.org/postconf.5.html#check_client_access check_client_access]''' ''calls the file spam-filter.cf''<br>
 +
This is an example of what I call message routing (Not sure if this is really whats its called :) ). Basically any message that hasn't been accepted or rejected by the previous checks is then handled by check_client_access. The PCRE file (spam-filter.cf) contains:
 +
 
 +
/./ FILTER lmtp:unix:/spamfilter.sock
 +
 
 +
/./ is a wildcard that will catch every message and in this case send it to spamfilter.sock
 +
 
 +
The result is that messages that are NOT sent from within "mynetworks", are NOT "sasl_authenticated", have a "authorized destination", and have a "listed recipient" are then '''routed''' to the spam filter.
 +
 
 +
 
 +
 
 +
 
 +
[[Category:Postfix]]

Latest revision as of 21:25, 16 August 2006

These restrictions are useful for accepting, rejecting and even routing messages.

Reference: smtpd_recipient_restrictions in the postfix documentation

Example:

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_recipient_restrictions =
      permit_mynetworks
      permit_sasl_authenticated
      reject_unauth_destination
      reject_unlisted_recipient
      check_client_access pcre:/etc/postfix/spam-filter.cf


NOTES:
reject_unlisted_recipient The best thing since sliced bread!
It will reject mail where the recipient domain is listed in Virtual_Mailbox_Domains but the recipient is not listed in Virtual_Mailbox_Maps. You would think this goes without saying, but this isn't the default behavior. When in doubt add this line!

check_client_access calls the file spam-filter.cf
This is an example of what I call message routing (Not sure if this is really whats its called :) ). Basically any message that hasn't been accepted or rejected by the previous checks is then handled by check_client_access. The PCRE file (spam-filter.cf) contains:

/./ FILTER lmtp:unix:/spamfilter.sock

/./ is a wildcard that will catch every message and in this case send it to spamfilter.sock

The result is that messages that are NOT sent from within "mynetworks", are NOT "sasl_authenticated", have a "authorized destination", and have a "listed recipient" are then routed to the spam filter.