>>> # >>> # Initialize. >>> # >>> #! ../bin/postmap smtpd_check_access >>> #msg_verbose 1 >>> smtpd_delay_reject 0 OK >>> mynetworks 127.0.0.0/8,168.100.189.0/28 OK >>> relay_domains porcupine.org OK >>> maps_rbl_domains dnsbltest.porcupine.org OK >>> rbl_reply_maps hash:smtpd_check_access OK >>> helo foobar OK >>> # >>> # RBL >>> # >>> mail sname@sdomain OK >>> recipient_restrictions reject_maps_rbl OK >>> client spike.porcupine.org 168.100.189.2 OK >>> rcpt rname@rdomain ./smtpd_check: warning: support for restriction "reject_maps_rbl" will be removed from Postfix; use "reject_rbl_client domain-name" instead OK >>> client foo 127.0.0.2 OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from foo[127.0.0.2]: 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org; from=<sname@sdomain> to=<rname@rdomain> proto=SMTP helo=<foobar> 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org >>> # >>> recipient_restrictions reject_rbl_client,dnsbltest.porcupine.org OK >>> client spike.porcupine.org 168.100.189.2 OK >>> rcpt rname@rdomain OK >>> client foo 127.0.0.2 OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from foo[127.0.0.2]: 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org; from=<sname@sdomain> to=<rname@rdomain> proto=SMTP helo=<foobar> 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org >>> recipient_restrictions reject_rbl_client,dnsbltest.porcupine.org=127.0.0.2 OK >>> client foo 127.0.0.2 OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from foo[127.0.0.2]: 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org; from=<sname@sdomain> to=<rname@rdomain> proto=SMTP helo=<foobar> 554 5.7.1 Service unavailable; Client host [127.0.0.2] blocked using dnsbltest.porcupine.org >>> client foo 127.0.0.1 OK >>> rcpt rname@rdomain OK >>> # >>> # RHSBL sender domain name >>> # >>> recipient_restrictions reject_rhsbl_sender,dsn.rfc-ignorant.org OK >>> client spike.porcupine.org 168.100.189.2 OK >>> mail sname@example.tld OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 client=spike.porcupine.org[168.100.189.2] client_address=168.100.189.2 client_name=spike.porcupine.org helo_name=foobar sender=sname@example.tld sender_name=sname sender_domain=example.tld recipient=rname@rdomain recipient_name=rname recipient_domain=rdomain rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=sname@example.tld rbl_class=Sender address; from=<sname@example.tld> to=<rname@rdomain> proto=SMTP helo=<foobar> 554 5.7.1 client=spike.porcupine.org[168.100.189.2] client_address=168.100.189.2 client_name=spike.porcupine.org helo_name=foobar sender=sname@example.tld sender_name=sname sender_domain=example.tld recipient=rname@rdomain recipient_name=rname recipient_domain=rdomain rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=sname@example.tld rbl_class=Sender address >>> mail sname@sdomain OK >>> rcpt rname@rdomain OK >>> # >>> # RHSBL client domain name >>> # >>> recipient_restrictions reject_rhsbl_client,dsn.rfc-ignorant.org OK >>> client example.tld 1.2.3.4 OK >>> mail sname@sdomain OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from example.tld[1.2.3.4]: 554 5.7.1 client=example.tld[1.2.3.4] client_address=1.2.3.4 client_name=example.tld helo_name=foobar sender=sname@sdomain sender_name=sname sender_domain=sdomain recipient=rname@rdomain recipient_name=rname recipient_domain=rdomain rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=example.tld rbl_class=Client host; from=<sname@sdomain> to=<rname@rdomain> proto=SMTP helo=<foobar> 554 5.7.1 client=example.tld[1.2.3.4] client_address=1.2.3.4 client_name=example.tld helo_name=foobar sender=sname@sdomain sender_name=sname sender_domain=sdomain recipient=rname@rdomain recipient_name=rname recipient_domain=rdomain rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=example.tld rbl_class=Client host >>> # >>> # RHSBL recipient domain name >>> # >>> recipient_restrictions reject_rhsbl_recipient,dsn.rfc-ignorant.org OK >>> client spike.porcupine.org 168.100.189.2 OK >>> mail sname@sdomain OK >>> rcpt rname@rdomain OK >>> rcpt rname@example.tld ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 client=spike.porcupine.org[168.100.189.2] client_address=168.100.189.2 client_name=spike.porcupine.org helo_name=foobar sender=sname@sdomain sender_name=sname sender_domain=sdomain recipient=rname@example.tld recipient_name=rname recipient_domain=example.tld rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=rname@example.tld rbl_class=Recipient address; from=<sname@sdomain> to=<rname@example.tld> proto=SMTP helo=<foobar> 554 5.7.1 client=spike.porcupine.org[168.100.189.2] client_address=168.100.189.2 client_name=spike.porcupine.org helo_name=foobar sender=sname@sdomain sender_name=sname sender_domain=sdomain recipient=rname@example.tld recipient_name=rname recipient_domain=example.tld rbl_code=554 rbl_domain=dsn.rfc-ignorant.org rbl_txt=Not supporting null originator (DSN) rbl_what=rname@example.tld rbl_class=Recipient address >>> # >>> # RHSBL helo domain name >>> # >>> recipient_restrictions reject_rhsbl_helo,abuse.rfc-ignorant.org OK >>> helo example.tld OK >>> mail sname@sdomain OK >>> rcpt rname@rdomain ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 Service unavailable; Helo command [example.tld] blocked using abuse.rfc-ignorant.org; Not supporting abuse@domain; from=<sname@sdomain> to=<rname@rdomain> proto=SMTP helo=<example.tld> 554 5.7.1 Service unavailable; Helo command [example.tld] blocked using abuse.rfc-ignorant.org; Not supporting abuse@domain >>> # >>> # Check MX access >>> # >>> helo_restrictions check_helo_mx_access,hash:smtpd_check_access OK >>> #helo verisign-wildcard.com >>> helo verisign.com OK >>> helo example.tld ./smtpd_check: warning: Unable to look up MX host example.tld for Helo command example.tld: hostname nor servname provided, or not known OK >>> sender_restrictions check_sender_mx_access,hash:smtpd_check_access OK >>> mail foo@pls.net.au OK >>> #mail foo@verisign-wildcard.com >>> mail foo@verisign.com OK >>> recipient_restrictions check_recipient_mx_access,hash:smtpd_check_access OK >>> #rcpt foo@verisign-wildcard.com >>> rcpt foo@verisign.com OK >>> rcpt foo@1.2.3.porcupine.org ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@1.2.3.porcupine.org>: Recipient address rejected: mail server 10.10.10.10; from=<foo@verisign.com> to=<foo@1.2.3.porcupine.org> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@1.2.3.porcupine.org>: Recipient address rejected: mail server 10.10.10.10 >>> # >>> # Check NS access >>> # >>> helo_restrictions check_helo_ns_access,hash:smtpd_check_access OK >>> helo email-publisher.com ./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <email-publisher.com>: Helo command rejected: Access denied; from=<foo@verisign.com> proto=SMTP helo=<email-publisher.com> 554 5.7.1 <email-publisher.com>: Helo command rejected: Access denied >>> helo ns1.topica.com ./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <ns1.topica.com>: Helo command rejected: Access denied; from=<foo@verisign.com> proto=SMTP helo=<ns1.topica.com> 554 5.7.1 <ns1.topica.com>: Helo command rejected: Access denied >>> #helo verisign-wildcard.com >>> helo example.tld ./smtpd_check: warning: Unable to look up NS host for example.tld: Host not found OK >>> sender_restrictions check_sender_ns_access,hash:smtpd_check_access OK >>> mail foo@email-publisher.com ./smtpd_check: <queue id>: reject: MAIL from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@email-publisher.com>: Sender address rejected: Access denied; from=<foo@email-publisher.com> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@email-publisher.com>: Sender address rejected: Access denied >>> mail foo@ns1.topica.com ./smtpd_check: <queue id>: reject: MAIL from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@ns1.topica.com>: Sender address rejected: Access denied; from=<foo@ns1.topica.com> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@ns1.topica.com>: Sender address rejected: Access denied >>> #mail foo@verisign-wildcard.com >>> recipient_restrictions check_recipient_ns_access,hash:smtpd_check_access OK >>> rcpt foo@email-publisher.com ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@email-publisher.com>: Recipient address rejected: Access denied; from=<foo@ns1.topica.com> to=<foo@email-publisher.com> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@email-publisher.com>: Recipient address rejected: Access denied >>> rcpt foo@ns1.topica.com ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@ns1.topica.com>: Recipient address rejected: Access denied; from=<foo@ns1.topica.com> to=<foo@ns1.topica.com> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@ns1.topica.com>: Recipient address rejected: Access denied >>> #rcpt foo@verisign-wildcard.com >>> rcpt foo@1.2.3.porcupine.org ./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.189.2]: 554 5.7.1 <foo@1.2.3.porcupine.org>: Recipient address rejected: name server spike.porcupine.org; from=<foo@ns1.topica.com> to=<foo@1.2.3.porcupine.org> proto=SMTP helo=<example.tld> 554 5.7.1 <foo@1.2.3.porcupine.org>: Recipient address rejected: name server spike.porcupine.org