Re: Blacklisting external domains

2015-02-06 Thread Charles Marcus
On 2/6/2015 8:52 AM, li...@rhsoft.net li...@rhsoft.net wrote: it's simple * if there is any permit in front - well * if you are using specific submission_client_restrictions and have placed the access table in front of any permit it works in that context postfix is dead-simple

Re: Blacklisting external domains

2015-02-06 Thread Charles Marcus
On 2/6/2015 8:58 AM, li...@rhsoft.net li...@rhsoft.net wrote: and BTW one reason more to make a transport it is not affected by other restrictions it just comes at the end of the chain when postfix now would accept the message even by a explicit OK in any restriction table

Re: Blacklisting external domains

2015-02-06 Thread li...@rhsoft.net
Am 06.02.2015 um 14:52 schrieb li...@rhsoft.net: Am 06.02.2015 um 14:43 schrieb Charles Marcus: Well... ok, so now I just have to figure out what I'm missing/doing wrong. Hmmm... ok, just moved it from smtpd_relay_restrictions to submission_client_restrictions and it works now... But it

Re: Blacklisting external domains

2015-02-06 Thread Charles Marcus
On 2/6/2015 8:26 AM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: Charles Marcus: user@domain Matches the specified mail address. domain.tld Matches domain.tld as the domain part of an email address.

Re: Blacklisting external domains

2015-02-06 Thread Charles Marcus
On 2/5/2015 5:06 PM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: Charles Marcus: Ok... but... this sounds like you are saying that it is expected that my simple postmap -q test would fail, but that someone attempting to relay I am saying that you should

Re: Blacklisting external domains

2015-02-06 Thread li...@rhsoft.net
Am 06.02.2015 um 14:43 schrieb Charles Marcus: Well... ok, so now I just have to figure out what I'm missing/doing wrong. Hmmm... ok, just moved it from smtpd_relay_restrictions to submission_client_restrictions and it works now... But it still looks to me like it should have worked when

Re: Blacklisting external domains

2015-02-06 Thread Wietse Venema
Charles Marcus: user@domain Matches the specified mail address. domain.tld Matches domain.tld as the domain part of an email address. .domain.tld Matches subdomains of domain.tld, but only when the ... user@

Re: Blacklisting external domains

2015-02-06 Thread Benny Pedersen
On 6. feb. 2015 13.49.31 Charles Marcus cmar...@media-brokers.com wrote: I had found some $random examples when googling that suggested I should be able to do this with a simple access map. Guess they were wrong. possible a single access map can be used in multiple restrictions ?, just

Re: Blacklisting external domains

2015-02-05 Thread Wietse Venema
Charles Marcus: Ok, Can't seem to figure this out... I want to block sending to certain domains - in this case, a domain that is typod... Googling suggests this should work: smtpd_relay_restrictions = check_recipient_access ${hash}/blacklisted_domains, permit_sasl_authenticated,

Re: Blacklisting external domains

2015-02-05 Thread Charles Marcus
On 2/5/2015 4:35 PM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: Charles Marcus: Ok, Can't seem to figure this out... I want to block sending to certain domains - in this case, a domain that is typod... Googling suggests this should work:

Blacklisting external domains

2015-02-05 Thread Charles Marcus
Ok, Can't seem to figure this out... I want to block sending to certain domains - in this case, a domain that is typod... Googling suggests this should work: smtpd_relay_restrictions = check_recipient_access ${hash}/blacklisted_domains, permit_sasl_authenticated, permit_mynetworks, reject

Re: Blacklisting external domains

2015-02-05 Thread li...@rhsoft.net
Am 05.02.2015 um 22:19 schrieb Charles Marcus: Ok, Can't seem to figure this out... I want to block sending to certain domains - in this case, a domain that is typod... Googling suggests this should work: smtpd_relay_restrictions = check_recipient_access ${hash}/blacklisted_domains,

Re: Blacklisting external domains

2015-02-05 Thread Wietse Venema
Charles Marcus: check_recipient_access automatically makes queries for the email address, the domain, and more. See access(5). # postmap -q exemple.com hash:/etc/postfix/maps/hash/blacklisted_domains REJECT did you mean 'exAmple.com'? # postmap -q recipi...@exemple.com