Hi Simon,

On Fri, Jan 28, 2011 at 4:29 PM, Simon Hobson <[email protected]> wrote:
>
> I think it means you may not have the Postfix integration setup
> right. I'm not familiar with Zimbra - is it using Postfix for it's
> mail handling ? If so, then you should be able to just follow the
> setup guides.
>
> But you need to call the policy daemon in two places :
>
> smtpd_recipient_restrictions =
>   ...
>   check_policy_service inet:postback.back.furness.net:10031,
>   ...
>
> smtpd_end_of_data_restrictions =
>   check_policy_service inet:postback.back.furness.net:10031,
>   ...
>
>
> In my setup I have :
> smtpd_recipient_restrictions =
>   permit_mynetworks,
>   reject_unauth_pipelining,
>   check_client_access cidr:/etc/postfix/host_access,
>   check_policy_service inet:postback.back.furness.net:10031,
>   permit_sasl_authenticated,
>   reject_non_fqdn_recipient,
>   reject_unknown_recipient_domain,
>   reject_unlisted_recipient,
>   reject_unauth_destination,
>   permit
>
> smtpd_end_of_data_restrictions =
>   check_policy_service inet:postback.back.furness.net:10031,
>   permit
>
>
> Looking through the logs, all the calls have "'ProtocolState' =>
> 'END-OF-MESSAGE'" which suggests you only have the policy service
> call in smtpd_end_of_data_restrictions.
>

Thank you, solved it by following what Nigel and you say regarding
Postfix integration. It seems that the order of
smtpd_recipient_restrictions entry related to my previous problem.
Below is the working in mine :

smtpd_recipient_restrictions = check_policy_service
inet:127.0.0.1:10031, reject_non_fqdn_recipient,
permit_sasl_authenticated, permit_mynetworks,
reject_unauth_destination, reject_unlisted_recipient,
reject_invalid_hostname, reject_non_fqdn_sender, permit

smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031

Just FYI, Zimbra using Postfix as MTA and from version 7.0.0
(currently in beta version) will integrating policyd into MTA check :
https://bugzilla.zimbra.com/show_bug.cgi?id=8791

Thank you.

-- 
Best Regards,

Masim "Vavai" Sugianto
/************************************************************/
Blog (ID)                                  : http://www.vavai.com
Excellent Infotama Kreasindo    : http://www.vavai.biz
/************************************************************/
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to