Wietse Venema via Postfix-users:
> Laura Steynes via Postfix-users:
> > Hi Wietse,
> > Thanks, as I suspect, it is doing the >>> START Client host RESTRICTIONS
> > <<<
> > generic_checks: name=reject_rbl_client, etc etc and then calling
> > milter8_connect: transport=unix endpoint=/var/run/milter/milter-regex.sock
> >
> > I swapped this debug and applied it on normal smtp and that works as
> > expected, milter before "START Sender address RESTRICTIONS", I note the
> > different calls, START Client|Sender.... So I guess the "client" section
> > takes precedence in checks before handing off to milter - or something in
> > my cfg is forcing an order change, its nearly midnight here now so I will
> > play some more, taking out options from master then main etc to see if that
> > is the case over the weekend when servers are quieter.
>
> Indeed. milters only see activities that are allowed by Postfix.
>
> Maybe you can move the DNSBL restrictions to a later SMTP protocol
> stage.
>
> Example:
>
> Use milter-regex to veto RCPT TO commands, and use DNSBL restrictions
> in smtp_data_restrictions.
smtpd_data_restrictions.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
