Linode Forum
Linode Community Forums 		 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic

Board index » Linux Community Forums » Email/SMTP Related Forum
  Print view Previous topic | Next topic 
Author Message
sblantipodi
PostPosted: Mon Nov 07, 2011 7:23 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Hi all,
as title.

I have configured sender_access to reject some email address and done all the commands described here:
http://www.cyberciti.biz/faq/howto-blac ... l-address/

but I continue to receive the email that I marked as REJECT

Why?

Thanks.
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Tue Nov 08, 2011 2:39 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
bumping the question.
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Sun Nov 13, 2011 9:37 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
no one have idea?
Top
   
Reply with quote  
skavoovie
 Post subject:
PostPosted: Tue Nov 15, 2011 11:07 pm 
Offline
Senior Newbie

Joined: Thu Feb 28, 2008 1:29 pm
Posts: 19
Post your relevant portions of your main.cf (e.g. smtpd_receipient_restrictions, and other client restriction parameters configured), sample from your sender_access file, and log snippet from delivery not blocked.
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Wed Nov 16, 2011 8:03 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
skavoovie wrote:
Post your relevant portions of your main.cf (e.g. smtpd_receipient_restrictions, and other client restriction parameters configured), sample from your sender_access file, and log snippet from delivery not blocked.


main.cf
Code:
smtpd_delay_reject = yes
smtpd_helo_required = no
smtpd_helo_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    #reject_non_fqdn_helo_hostname,
    #reject_invalid_helo_hostname,
    permit
# Sender restrictions:
smtpd_sender_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    #reject_non_fqdn_sender,
    #reject_unknown_sender_domain,
    permit
# Recipient restrictions:
smtpd_recipient_restrictions =
   permit_mynetworks,
   permit_sasl_authenticated,
   #reject_unauth_pipelining,
   #reject_non_fqdn_recipient,
   #reject_unknown_recipient_domain,
   reject_unauth_destination,
   check_sender_access hash:/etc/postfix/sender_access,
   reject_rbl_client zen.spamhaus.org,
#   reject_rbl_client bl.spamcop.net,
#   check_policy_service unix:postgrey/socket,
   permit

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous


sender_access:
Code:
google.com                          OK
aesha9years@gmail.com               REJECT
lolylol88@gmail.com                 REJECT


Log does not log anything regarding the problem since the email is not blocked at all.
I added one of my email address to the sender_access REJECT and than tryed to send me the email from my external mail address to the one managed from my vps, the email is correctly delivered.
Top
   
Reply with quote  
skavoovie
 Post subject:
PostPosted: Wed Nov 16, 2011 10:36 am 
Offline
Senior Newbie

Joined: Thu Feb 28, 2008 1:29 pm
Posts: 19
Log excerpt.
Top
   
Reply with quote  
Stever
 Post subject:
PostPosted: Wed Nov 16, 2011 10:56 am 
Offline
Senior Member

Joined: Fri Dec 07, 2007 1:37 am
Posts: 385
Location: NC, USA
Have you run postmap after updating your sender_access file?
Code:
# postmap /etc/postfix/sender_access
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Wed Nov 16, 2011 1:55 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
skavoovie wrote:
Log excerpt.


Code:
Nov 16 18:49:05 netstar postfix/smtpd[14846]: connect from "MY_IP_hided"
Nov 16 18:49:05 netstar postfix/smtpd[14846]: setting up TLS connection from "MY_IP_hided"
Nov 16 18:49:05 netstar postfix/smtpd[14846]: Anonymous TLS connection established from"MY_IP_hided": TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)
Nov 16 18:49:06 netstar postfix/smtpd[14846]: 999078E004: client="MY_IP_hided", sasl_method=PLAIN, sasl_username=myusername
Nov 16 18:49:06 netstar postfix/cleanup[14854]: 999078E004: message-id=<4EC3F75C.5030104@gmail.com>
Nov 16 18:49:06 netstar postfix/qmgr[14837]: 999078E004: from=<email@gmail.com>, size=630, nrcpt=1 (queue active)
Nov 16 18:49:06 netstar postfix/local[14855]: 999078E004: to=<myvpsemail>, orig_to=<myvpsemail>, relay=local, delay=0.44, delays=0.42/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
Nov 16 18:49:06 netstar postfix/qmgr[14837]: 999078E004: removed
Nov 16 18:49:07 netstar postfix/smtpd[14846]: disconnect from "MY_IP_hided"


As you can see the email I sent from gmail to my vps is correctly delivered
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Wed Nov 16, 2011 1:59 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Stever wrote:
Have you run postmap after updating your sender_access file?
Code:
# postmap /etc/postfix/sender_access


sure and restarted postfix.
Top
   
Reply with quote  
Stever
 Post subject:
PostPosted: Wed Nov 16, 2011 2:46 pm 
Offline
Senior Member

Joined: Fri Dec 07, 2007 1:37 am
Posts: 385
Location: NC, USA
sblantipodi wrote:
Code:
Nov 16 18:49:06 netstar postfix/smtpd[14846]: 999078E004: client="MY_IP_hided", sasl_method=PLAIN, sasl_username=myusername


You have permit_sasl_authenticated before your check_sender_access in smtpd_recipient_restrictions, so if you are connecting with SASL the sender_access restrictions don't get checked.
Top
   
Reply with quote  
sblantipodi
 Post subject:
PostPosted: Wed Nov 16, 2011 3:26 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Stever wrote:
You have permit_sasl_authenticated before your check_sender_access in smtpd_recipient_restrictions, so if you are connecting with SASL the sender_access restrictions don't get checked.


you good, you got it ;)
many thanks :)
Top
   
Reply with quote  
Display posts from previous:  Sort by  
Post new topic  Reply to topic

Board index » Linux Community Forums » Email/SMTP Related Forum


Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group