Re: Whitelist a host using check_client_access before the rbl check?

2008-08-05 Thread Nicolas KOWALSKI
On Mon, Aug 04, 2008 at 02:40:54PM -0400, Brian Evans - Postfix List wrote: Nicolas KOWALSKI wrote: On Mon, Aug 04, 2008 at 12:29:34PM -0400, Brian Evans - Postfix List wrote: A *better* way is force them to Authenticate using SASL. See http://www.postfix.org/SASL_README.html Postfix

Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Nicolas KOWALSKI
Hello, I would like to whitelist a specific host, because it is currently listed in the zen rbl, but I am unable to do so. Here is a sample log of the rejected host connecting to my postfix: Aug 4 14:17:17 petole postfix/smtpd[23545]: connect from 225.96.68-86.rev.gaoland.net[86.68.96.225]

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Charles Marcus
Let me give this one a try... I *think* i see the problem... On 8/4/2008, Nicolas KOWALSKI ([EMAIL PROTECTED]) wrote: Aug 4 14:17:18 petole postfix/smtpd[23545]: NOQUEUE: reject: RCPT from 225.96.68-86.rev.gaoland.net[86.68.96.225]: 554 5.7.1 Service unavailable; Client host [86.68.96.225]

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Stan Hoeppner
Hello Nicolas, Try this: Remove 'check_client_access hash:/etc/postfix/client_access' from smtpd_recipient_restrictions. Add the following line in main.cf somewhere before/above smtpd_recipient_restrictions: smtpd_client_restrictions = hash:/etc/postfix/client_access And make sure you

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Nicolas KOWALSKI
On Mon, Aug 04, 2008 at 08:58:01AM -0400, Charles Marcus wrote: Let me give this one a try... I *think* i see the problem... On 8/4/2008, Nicolas KOWALSKI ([EMAIL PROTECTED]) wrote: Aug 4 14:17:18 petole postfix/smtpd[23545]: NOQUEUE: reject: RCPT from

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Brian Evans - Postfix List
Nicolas KOWALSKI wrote: On Mon, Aug 04, 2008 at 08:58:01AM -0400, Charles Marcus wrote: Let me give this one a try... I *think* i see the problem... On 8/4/2008, Nicolas KOWALSKI ([EMAIL PROTECTED]) wrote: Aug 4 14:17:18 petole postfix/smtpd[23545]: NOQUEUE: reject: RCPT from

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Nicolas KOWALSKI
On Mon, Aug 04, 2008 at 10:56:36AM -0400, Brian Evans - Postfix List wrote: Nicolas KOWALSKI wrote: On Mon, Aug 04, 2008 at 08:58:01AM -0400, Charles Marcus wrote: On 8/4/2008, Nicolas KOWALSKI ([EMAIL PROTECTED]) wrote: Aug 4 14:17:18 petole postfix/smtpd[23545]: NOQUEUE: reject:

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Brian Evans - Postfix List
Brian Evans - Postfix List wrote: Nicolas KOWALSKI wrote: The client said 'EHLO demisel.dyndns.org'. This is the value that check_helo_access can find, though somewhat unreliable to whitelist. I apparently have no other choices to whitelist-before-rbl such a dynamic pool's host.

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Nicolas KOWALSKI
On Mon, Aug 04, 2008 at 12:29:34PM -0400, Brian Evans - Postfix List wrote: Brian Evans - Postfix List wrote: Nicolas KOWALSKI wrote: The client said 'EHLO demisel.dyndns.org'. This is the value that check_helo_access can find, though somewhat unreliable to whitelist. I apparently have no

Re: Whitelist a host using check_client_access before the rbl check?

2008-08-04 Thread Brian Evans - Postfix List
Nicolas KOWALSKI wrote: On Mon, Aug 04, 2008 at 12:29:34PM -0400, Brian Evans - Postfix List wrote: A *better* way is force them to Authenticate using SASL. See http://www.postfix.org/SASL_README.html Postfix supports either Cyrus or Dovecot SASL. P.S. This is if you fully trust and