Re: Is reject_unknown_{reverse_}client_hostname safe?

2018-04-07 Thread Mal
Very handy postfix feature.. Mal On 8/04/2018 6:33 AM, Wietse Venema wrote: > > I have "warn_if_reject reject_unknown_reverse_client_hostname" to > test the waters, and I don't feel an urge to make that a hard reject.

Re: Is reject_unknown_{reverse_}client_hostname safe?

2018-04-07 Thread Wietse Venema
Daniele Nicolodi: > Hello, > > I have been using > > smtpd_relay_restrictions = > ... > reject_unknown_reverse_client_hostname All features like this can block legitimate email. There is no guarantee that someone won't break a good configuration, especially when MAIL, DNS, and FIREWALL are

Is reject_unknown_{reverse_}client_hostname safe?

2018-04-07 Thread Daniele Nicolodi
Hello, I have been using smtpd_relay_restrictions = ... reject_unknown_reverse_client_hostname warn_if_reject reject_unknown_client_hostname ... for a long while in my configuration, where the warn_if_reject is there because I thought that the more strict check could have blocked some