[IMGate] Re: Problem with main.cf syntax

2005-03-30 Thread Len Conrad

I just encountered an issue with the main.cf file as provided by Len for the
basic Imgate configuration and hope someone can clarify the situation for
me. The issue came up when I needed to whitelist an email recipient address
for a few of our users to the configuration and came across what looks to me
like an error in the syntax. When I looked the the file main.cf I saw 2
lines that on their own as shown below:
smtpd_recipient_restrictions =
  reject_unauth_pipelining,
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unknown_recipient_domain,
  reject_unverified_recipient,
  hash:/etc/postfix/to_recipients_bw.map,
  reject_unknown_sender_domain,
  permit_mynetworks,
  reject_unauth_destination,
  hash:/etc/postfix/to_recipients_bw.map,

Shouldn't the hash:/etc/postfix/to_recipients_bw.map be on the same line
as one of the restrictions as the maptype:mapname?

no, because we are in the smtpd_recipient_restrictions already

  Also there are some
reject_ restrictions here I don't see listed in the Postfix book I have.

Is the /etc/postfix/to_recipients_bw.map the correct place to add email
addresses for our users who don't want email blocked?

yes, see
man 5 access

  The users in question
receive email from Korea for potential students and since I set up IMGate
here they are being contacted by people telling them that email from these
potential Korean students is being rejected.

look in the log file to see why exactly.  if the rejects are for header or 
body checks due to kr character set, you remove the kr from filter. This is 
found by inspection.  :)

smtpd process to_recipients_bw whitelisting won't have any effect on 
rejects done by the cleanup process.

  I have asked for the specific bounce messages but to date non have been
supplied making it more difficult to track down the problem.

egrep the maillog file

Len





[IMGate] Re: Problem with main.cf syntax

2005-03-30 Thread Gerry
From: Richard Edge [EMAIL PROTECTED]

I just encountered an issue with the main.cf file as provided by Len for the
basic Imgate configuration and hope someone can clarify the situation for
SNIP

Is the /etc/postfix/to_recipients_bw.map the correct place to add email
addresses for our users who don't want email blocked? The users in question
receive email from Korea for potential students and since I set up IMGate
here they are being contacted by people telling them that email from these
potential Korean students is being rejected. 

Korean mail is probably being blocked by either header checks or body checks- 
since Len is very agressive in blocking asian sourced spam.  IIRC body checks 
has several checks for foreign character sets.  Header/Body checks apply to all 
mail and I don't think you can selectivly bypass them.

I have asked for the specific bounce messages but to date non have been
supplied making it more difficult to track down the problem. I also don't
want to open it up to allow spam to the rest of our users. The purpose here
is for two deparments who need to receive email from Korea, English as a
Second Language Institute and our Korean Worldview Studies program. Any
suggestions would be helpful.  

Your missing bounces were probably returned to the Korean students who cannot 
send a copy your user- I doubt they can send you a copy of the bounce!

What Postfix book are you referencing?  If the book was based on 1.x, there are 
many things added to 2.0 and even 2.2!

Gerry 
 
   



[IMGate] Re: Problem with main.cf syntax

2005-03-30 Thread Richard Edge
 
-Original Message-

no, because we are in the smtpd_recipient_restrictions already

Okay, got it.

yes, see
man 5 access

Hadn't checked there. I was using the book instead.

look in the log file to see why exactly.  if the rejects are for header or
body checks due to kr character set, you remove the kr from filter. This is
found by inspection.  :)

Tried that unfortunately they could not enven provide a date or time and
with the tousands of other responsibilities I have I want the onus to be on
the user complaing to at least provide me with enough criteria to narrow the
search. I though I would check the list for other tips.

smtpd process to_recipients_bw whitelisting won't have any effect on
rejects done by the cleanup process.

Understood

  I have asked for the specific bounce messages but to date non have 
been supplied making it more difficult to track down the problem.

egrep the maillog file

Like I said I would do this but without more details I am not going to
search a months worth of logs if the user isn't going to meet me half-way. I
use grep and the logs regularly but I always ask for enough details to begin
a search or I would spend all my time doing so. Email administration is not
my only responsibility.

Thanks for the your help it has given me a couple of other areas to check.

Richard Edge
Senior Systems Administrator | Technology Services
Trinity Western University | t: 604.513.2089
f: 604.513.2038 | e: [EMAIL PROTECTED] | www.twu.ca/technology 








-- Binary/unsupported file stripped by Ecartis --
-- Type: application/x-pkcs7-signature
-- File: smime.p7s