postfix-users October 2010 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: Postfix seems to ignore check_policy_service

Re: Postfix seems to ignore check_policy_service

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_nospam>
Date: Tue Oct 05 2010 - 21:27:07 GMT
To: postfix-users@postfix.org

* John Swift <stuperman4@yahoo.com>:

> mydomain = XXX.com
> myhostname = hq-relaytest-01

myhostname must be a FQDN, probably hq-relaytest-01.$mydomain

> mynetworks = 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 127.0.0.0/8
Don't test your policyd from there.

> smtpd_recipient_restrictions = permit_mynetworks, check_policy_service inet:127.0.0.1:10031, reject_unauth_destination, permit
Looking good.

> master.cf:
> smtp inet n - n - - smtpd
No override, looking good.

So from where did you test this? You need to be outside 10.0.0.0/8,
192.168.0.0/16, 172.16.0.0/12, 127.0.0.0/8 to ever reach
check_policy_service inet:127.0.0.1:10031,

-- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt_at_charite.de | http://www.charite.de