Hello List,

I have a problem with check_sender_access that I can't find a solution to.

My setup actually works very well with the exception of bounce handling.
More on that later, first to describe my setup:

2 postfix mail server, one, mail-server1, is connected to the internet, the second, calling it list-server1, which serves a few mailing lists, is only reachable thru
mail-server1.

On mail-server1 a transport map entry sends everything for @list-dom.de to list-server1, list-server1 does his work and sends all back to mail-server1 which then delivers to
the final destination.

On list-server1, to prevent the whole world sending mails, I have installed a check_sender_access map to accept a few allowed domains, reject everything else.

---- 8< ----
smtpd_sender_restrictions = check_sender_access regexp:/etc/postfix/config/access_sender,
                                          reject
---- 8< ----

access_sender file:

---- 8< ----
/^([a-z0-9_=\.-]+)@dom1.de/                                OK
/^([a-z0-9_=\.-]+)@dom2.de/                                OK
/^([a-z0-9_=\.-]+)@dom3.de/                               OK
---- 8< ----

All fine so far, but...

... bounces, as the are send with empty FROM (<>), as I understand to prevent loops, get rejected to. This is a problem because nobody will ever notice if there are dead emails in a list. Also, automatic bounce handling (I am using mailman3 on list-server1)
will never do anything.

---- 8< ----
<test-boun...@list-dom.de>: host 10.245.16.24[10.245.16.24] said: 554 5.7.1 <>: Sender address rejected: Access denied (in reply to MAIL FROM command)
---- 8< ----

with 10.245.16.24 being list-server1

After all googleing and manual reading I have done, I can't find a solution and hope someone
can point me into the right direction.

Thanks in advance,
Daniel

--
Anything that is unrelated to elephants is irrelephant.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to