On Dec 7, 2011 2:22 AM, "Paul Hartman" <paul.hartman+gen...@gmail.com> wrote: > > On Tue, Dec 6, 2011 at 11:11 AM, Michael Orlitzky <mich...@orlitzky.com> wrote: > > On 12/06/11 11:32, Grant wrote: > >> > >> Got it. Your explanations are positively lucid. > >> > >> I added this to /etc/postifx/main.cf: > >> > >> postscreen_greet_action = enforce > >> postscreen_pipelining_enable = yes > >> postscreen_pipelining_action = enforce > >> postscreen_non_smtp_command_enable = yes > >> postscreen_non_smtp_command_action = enforce > >> postscreen_bare_newline_enable = yes > >> postscreen_bare_newline_action = enforce > >> > >> and I commented this and restarted postfix: > >> > >> #check_policy_service inet:127.0.0.1:10030 > >> > >> Should this effectively disable postgrey and enable postscreen? > >> > > > > That will disable postgrey, but isn't enough to enable postscreen. There > > are a couple of daemons you have to enable in master.cf (steps 2 through 6): > > > > http://www.postfix.org/POSTSCREEN_README.html#enable > > > > That README refers to lines that are commented-out in master.cf; of > > course, if you've upgraded from an earlier of postfix, you won't have them. > > > > What I did was to untar the latest postfix release under my home > > directory, and find the master.cf that ships with it. Then, I > > copy/pasted the lines mentioned in the README over to my real master.cf. > > > > After a restart, you should see lines like this in your mail log: > > > > Dec 6 03:13:46 mx1 postfix/postscreen[2810]: CONNECT from ... > > > > that let you know its' working. > > Thanks for bringing up postscreen and the rest of your responses to > Grant in this thread, I wasn't aware of it either. None of the HOWTOs > I read ever mentioned it. :) I'm going to give it a try and see how it > goes. >
Indeed. They are also unclear on how to configure SASL (but that's a different story). Luckily, I'm building my mailfiltering gateway from scratch, and have been logging everything I do. When everything's finished and the mfgw works well, I'll distill my log into yet-another-wiki-article. Rgds,
