postfix-users December 2011 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: correct placement for fqrdns.regexp

Re: correct placement for fqrdns.regexp

From: Noel Jones <njones_at_nospam>
Date: Thu Dec 15 2011 - 13:42:09 GMT
To: Tom Kinghorn <thomas.kinghorn@gmail.com>, postfix-users@postfix.org

On 12/15/2011 2:30 AM, Tom Kinghorn wrote:
> Morning List.
>
> Sorry for the trivial question.
>
> I was just wondering where the best place for the fqrdns.regexp
> "check_client_access".
>
> I see on the systems I have inherited, it is in the
> "smtpd_client_restrictions" which makes sense however
> it is placed before the "permit_sasl_authenticated" line, which does
> not make sense
> as this would reject the connection, even if they use smtp
> authentication.

Yes, the check should be after permit_mynetworks and
permit_sasl_authenticated. Something like:

smtpd_client_restrictions =
  permit_mynetworks
  permit_sasl_authenticated
  check_reverse_client_hostname_access regexp:/etc/postfix/fqrdns.regexp

   -- Noel Jones