| Server IP : 23.254.227.96 / Your IP : 216.73.216.46 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.1.1k System : Linux hwsrv-1277026.hostwindsdns.com 4.18.0-477.13.1.el8_8.x86_64 #1 SMP Tue May 30 14:53:41 EDT 2023 x86_64 User : viralblo ( 1001) PHP Version : 8.1.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/self/root/usr/share/doc/pypolicyd-spf/ |
Upload File : |
This document illustrates applying different SMTPD Access Restrictions
for different recipients depending upon whether a message gets SPF
Pass. An understanding of at least the following Postfix documents
and associated man pages is required.
RESTRICTION_CLASS_README
SMTPD_ACCESS_README
SMTPD_POLICY_README
The Postfix RESTRICTION_CLASS_README opens with the following example
illustrating the use of different restrictions for different
recipients.
/etc/postfix/main.cf:
smtpd_restriction_classes = restrictive, permissive
# With Postfix < 2.3 specify reject_unknown_client.
restrictive = reject_unknown_sender_domain
reject_unknown_client_hostname ...
permissive = permit
smtpd_recipient_restrictions
permit_mynetworks
reject_unauth_destination
check_recipient_access hash:/etc/postfix/recipient_access
/etc/postfix/recipient_access:
joe@my.domain permissive
jane@my.domain restrictive
The example below illustrates using this policy-spf daemon with the
Postfix "check_policy_service" access restriction to apply the
"permissive" restriction only to messages getting SPF Pass.
/etc/python-policyd-spf/policyd-spf.conf:
HELO_pass_restriction = spf_fin, passed_spf
Mail_From_pass_restriction = spf_fin, passed_spf
/etc/python-policyd-spf/policyd-spf-fin.conf:
HELO_reject = False
Mail_From_reject = False
/etc/postfix/master.cf:
policyd-spf unix - n n - 0 spawn
user=nobody argv=/usr/bin/policyd-spf
policyd-spf-fin unix - n n - 0 spawn
user=nobody argv=/usr/bin/policyd-spf /etc/python-policyd-spf/policyd-spf-fin.conf
/etc/postfix/main.cf:
spf_fin = check_policy_service unix:private/policyd-spf-fin
smtpd_restriction_classes = restrictive, permissive, spf_fin, passed_spf
restrictive = reject_unknown_sender_domain
reject_unknown_client_hostname ...
permissive = permit
passed_spf
check_recipient_access hash:/etc/postfix/recipient_access
restrictive
smtpd_recipient_restrictions permit_mynetworks
reject_unauth_destination
check_policy_service unix:private/policyd-spf
restrictive
policyd-spf_time_limit = 3600
policyd-spf-fin_time_limit = 3600
/etc/postfix/recipient_access:
joe@my.domain permissive
jane@my.domain restrictive