Hi everyone,

I have rspamd in front of postfix and in certain situations I have to 
completely whitelist some sending servers on the rspamd level. These are cases 
where users have to forward mail from other systems and these nor have DMARC 
nor for that matter ARC implemented. So all forwarded mail with a reject 
policy on their DMARC config would in fact be rejected by rspamd when the 
sending servers are not whitelisted there.

So, but now I still have to filter such incoming mail in a way that I'd be 
able to block certain senders by their *header* From: on a user basis. I tried 
the following approach (currently for two users):

smtpd_recipient_restrictions =
    reject_unknown_recipient_domain,
    reject_unlisted_recipient,
    reject_non_fqdn_recipient,
    permit_sasl_authenticated,
    permit_mynetworks,
    reject_unverified_recipient,
    check_recipient_access hash:/opt/local/etc/postfix/protected_destinations,
    reject_unauth_pipelining
smtpd_restriction_classes = filter_user1, filter_user2
filter_user1 = check_sender_access hash:/opt/local/etc/postfix/filter/user1, 
permit
filter_user2 = check_sender_access hash:/opt/local/etc/postfix/filter/user2, 
permit

user1/user2:

s...@email.addr<tab>REJECT

While this works for any s...@email.addr coming in directly, it seems not to 
work with the forwarded mail from those hosts whitelisted on rspamd. Does 
anybody know why or how I should change my approach?

Thanks, Juerg

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to