On Tue, 27 Jan 2004, Len Conrad wrote:

|->
|->
|->>Jan 27 14:21:17 gumby postfix/smtpd[10429]: reject: RCPT from
|->>unknown[63.240.114.196]: 554 Client host rejected: cannot find your
|->>hostname, [63.240.114.196];
|->>==========
|->>smtpd_recipient_restrictions =
|->>   reject_unauth_pipelining,
|->>   reject_non_fqdn_sender,
|->>   reject_non_fqdn_recipient,
|->> >>>>>  check_sender_access hash:/etc/postfix/clients.map, <<<<<<<<<<<<<<<
|->>   reject_unknown_sender_domain,
|->>   reject_unknown_recipient_domain,
|->>
|->>Would this allow 63.240.114.0/23 to send mail?
|->
|->no, sender_access is the MAIL FROM:[EMAIL PROTECTED]
|->
|->you want to allow the IP in mta_clients_bw.map

smtpd_recipient_restrictions =
  reject_unauth_pipelining,
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unknown_sender_domain,
  reject_unknown_recipient_domain,
  permit_mynetworks,
  reject_unauth_destination,
  check_client_access hash:/etc/postfix/access,
  check_sender_access hash:/etc/postfix/access,
  check_helo_access hash:/etc/postfix/helo_hostnames.map,
  reject_non_fqdn_hostname,
  check_sender_access hash:/etc/postfix/spamlist_extended.map,
  check_sender_access hash:/etc/postfix/from_senders_bogus.map,
  check_sender_access hash:/etc/postfix/from_senders_mybogus.map,
  reject_maps_rbl,
  permit

I use the same file for both check_client_access and check_sender_access
so the access file both has domain and IP numbers in it and I did add
those blocks to the access file:

63.240.114.0                    OK
63.240.115.0                    OK

rebuilt the access file with postmap but they are still getting rejected.
Oops I think I just answered my own question.

I think I just saw the error of my ways. Instead of having the IP as
above, drop the .0 on the end:

63.240.114                    OK
63.240.115                    OK

Should do it? I cant believe I missed that.

Thanks.


Reply via email to