Hi,

I believed I had the whole facebook IP block covered by
/etc/postfix/access by adding the line:

69.63.176.0/20 OK

And recreating the has file.

However, a message from that block was rejected on account of its
listing by spamcop.

Apr 21 20:39:51 paddington postfix/smtpd[29991]: connect from
outmail018.snc1.tfbnw.net[69.63.178.177]
Apr 21 20:39:51 paddington postfix/smtpd[29991]: NOQUEUE: reject: RCPT
from outmail018.snc1.tfbnw.net[69.63.178.177]: 550 Service
unavailable; Client host [69.63.178.177] blocked using bl.spamcop.net;
Blocked - see http://www.spamcop.net/bl.shtml?69.63.178.177;
from=<notification+o246s...@facebookmail.com> to=<x...@example.org>
proto=ESMTP helo=<mx-out.facebook.com>
Apr 21 20:39:56 paddington postfix/smtpd[29991]: disconnect from
outmail018.snc1.tfbnw.net[69.63.178.177]


Can anyone explain what I have wrong. Here's postconf -n


# ARIN WHOIS database, last updated 2010-04-20 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html
paddington:~ # vi /etc/postfix/access
paddington:~ # postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases,
hash:/etc/php_email_aliases
body_checks = pcre:/etc/postfix/virus
bounce_size_limit = 1000
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 3
default_process_limit = 100
defer_transports =
disable_dns_lookups = no
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/headerchecks
html_directory = /usr/share/doc/packages/postfix/html
invalid_hostname_reject_code = 501
lmtp_sasl_security_options = noanonymous
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
$virtual_mailbox_maps
mail_name = Postfix ESMTP $myhostname
mail_spool_directory = /var/mail
mailbox_transport = lmtp:unix:/var/spool/postfix/socket/lmtp
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains = blackholes.mail-abuse.org, sbl.spamhaus.org,
bl.spamcop.net, blackholes.easynet.nl
maps_rbl_reject_code = 550
masquerade_domains = staff.example.org
masquerade_exceptions = root
message_size_limit = 40000000
mime_header_checks = pcre:/etc/postfix/virus
mydestination = example.org mail.example.org
myhostname = mail.example.org
mynetworks = 87.82.228.xxx
myorigin = example.org
newaliases_path = /usr/bin/newaliases
owner_request_special = no
readme_directory = /usr/share/doc/packages/postfix/README_FILES
recipient_delimiter = +
reject_code = 550
relay_domains_reject_code = 550
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_security_options =
smtp_tls_CAfile = /etc/postfix/certs/ssl.ca
smtp_tls_cert_file = /etc/postfix/certs/ssl.cert
smtp_tls_key_file = /etc/postfix/certs/ssl.key
smtp_tls_loglevel = 1
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = sdbm:/etc/postfix/cache/smtp_scache
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = yes
smtpd_client_restrictions = hash:/etc/postfix/access, reject_maps_rbl
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_recipient_limit = 1000
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, check_client_access
hash:/etc/postfix/access, reject_unauth_destination
hash:/etc/postfix/block, reject_non_fqdn_hostname,
reject_non_fqdn_sender, reject_non_fqdn_recipient,
reject_invalid_hostname, reject_unknown_sender_domain,
reject_unknown_client, check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = paddington
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access, hash:/etc/postfix/spammers
smtpd_tls_CAfile = /etc/ssl/certs/commercial.pem
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/ssl/certs/www.example.org.wc.2010.crt
smtpd_tls_key_file = /etc/ssl/certs/www.example.org.imap.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = sdbm:/etc/postfix/cache/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
soft_bounce = no
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport

Reply via email to