Re: Recipient verification with sending IP equal to probe IP

2016-12-16 Thread Wietse Venema
Pedro David Marco: > > > >Given your smtpd_mumble_restrictions rule, permit_mynetworks allows > >a client to skip the reject_unverified_whatever check. > > Wietse > > why Wietse? permit_mynetworks is on first place and should basically only > allow loopback according tomynetworks = 127.0.0.0/8

Re: Recipient verification with sending IP equal to probe IP

2016-12-16 Thread Pedro David Marco
>Given your smtpd_mumble_restrictions rule, permit_mynetworks allows >a client to skip the reject_unverified_whatever check. > Wietse why Wietse? permit_mynetworks is on first place and should basically only allow loopback according tomynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128  

Re: Recipient verification with sending IP equal to probe IP

2016-12-15 Thread Wietse Venema
Pedro David Marco: > Thanks Wietse but the sending IP is not listed in $mytetworks... ? Given your smtpd_mumble_restrictions rule, permit_mynetworks allows a client to skip the reject_unverified_whatever check. Oh, and of course this check does not apply at all for mail that is received with the

Re: Recipient verification with sending IP equal to probe IP

2016-12-15 Thread Pedro David Marco
Thanks Wietse but the sending IP is not listed in $mytetworks...   ---Pedro. From: Wietse Venema <wie...@porcupine.org> To: Postfix users <postfix-users@postfix.org> Sent: Thursday, December 15, 2016 1:15 PM Subject: Re: Recipient verification with sending IP equal to probe

Re: Recipient verification with sending IP equal to probe IP

2016-12-15 Thread Wietse Venema
Pedro David Marco: > Hi! > I am doing recipient address verification with reject_unverified _recipient > and it works pretty well, but i havenoticed that when the sending IP is the > same as the vrfy probing IP address, then this restriction is not applied. > does it make sense? > i have this

Recipient verification with sending IP equal to probe IP

2016-12-14 Thread Pedro David Marco
Hi! I am doing recipient address verification with reject_unverified _recipient   and it works pretty well, but i havenoticed that when the sending IP  is the same as the vrfy probing IP address, then this restriction is not applied. does it make sense?  i have this in in my main.cf: mynetworks =