Patrick Shanahan wrote:

* Sandy Drobic [05-29-07 17:58]:

...

Dont forget to execute "postmap hash:/etc/postfix/recipients_internal_only" after you change the file.

did that 2

went to an off-site shell account and sent a test msg, and the message *was* delivered :^(

Have I erred?

Perhaps rcpostfix reload -- Joe Morris Registered Linux user 231871 running openSUSE 10.2 x86_64 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2007-05-29 at 18:35 -0400, Patrick Shanahan wrote: ...

went to an off-site shell account and sent a test msg, and the message *was* delivered :^(

Have I erred?

Perhaps there is something interesting in the mail log. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGXK8wtTMYHG2NR9URAoGvAJ48gR2xLXTQfk2n2EBUmEJxN7UgTACgibH5 cOxZHu7kzbhjw7XNhVXsPTs= =IrSe -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2007-05-29 at 19:19 -0400, Patrick Shanahan wrote:

...

Perhaps there is something interesting in the mail log.

Yes, I was watching it as I tested :^). It reported that spamd passed the msg and postfix handed it off to procmail ...

I'm tired, so what I'm about to say I haven't thought it out carefully ;-) - - You are using fetchmail, I think. Mail handled off from fetchmail to postfix is considered local or remote for the purpose of this new checks? - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGXLaGtTMYHG2NR9URAnYpAJ4kXtcFrYZG6BQ5m8GbWSMCVFLnSwCeLiLd 9dr5md6CVRYdVWvDXEJzkKw= =nRfq -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Patrick Shanahan wrote:

* Carlos E. R. [05-29-07 19:29]:

...

I'm tired, so what I'm about to say I haven't thought it out carefully ;-) - - You are using fetchmail, I think. Mail handled off from fetchmail to postfix is considered local or remote for the purpose of this new checks?

You may have something here. But, according to TFM:

As each message is retrieved fetchmail normally delivers it via SMTP to port 25 on the machine it is running on (localhost), just as though

Uh, you might want to stop right here with rejecting mails that came in via fetchmail! The recipe that I gave you will only work when the mail is sent directly to your server, not for mails polled with fetchmail. In that case the mail has already been accepted for you (by the provider in your order). Any reject after that will only bounce the mail, not reject it. Additionally, fetchmail uses localhost, so it will probably be in $mynetworks as a trusted host, so the recipe will not work as desired anyway. To make it short: you can only discard (dangerous!) or tag the mails when you work with fetchmail. :-( -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

* Sandy Drobic [05-30-07 05:47]:

Patrick Shanahan wrote:

...

* Carlos E. R. [05-29-07 19:29]:

...

I'm tired, so what I'm about to say I haven't thought it out carefully ;-) - - You are using fetchmail, I think. Mail handled off from fetchmail to postfix is considered local or remote for the purpose of this new checks?

You may have something here. But, according to TFM:

As each message is retrieved fetchmail normally delivers it via SMTP to port 25 on the machine it is running on (localhost), just as though

Uh, you might want to stop right here with rejecting mails that came in via fetchmail!

The recipe that I gave you will only work when the mail is sent directly to your server, not for mails polled with fetchmail. In that case the mail has already been accepted for you (by the provider in your order).

Any reject after that will only bounce the mail, not reject it.

Additionally, fetchmail uses localhost, so it will probably be in $mynetworks as a trusted host, so the recipe will not work as desired anyway.

To make it short: you can only discard (dangerous!) or tag the mails when you work with fetchmail. :-(

Guess I went brain dead at this point. I do use fetchmail, but only for non-local/hosted accounts such as gmail. For my local domain, wahoo.no-ip.org, I received mail via postfix only. And from my logs the suggest changes to /etc/postfix/recipients_internal_only: at@example.com 554 internal address only root@example.com 554 internal address only and /etc/postfix/main.cf, inclusion of above under smtpd_recipient_restrictions have had the desired effect.... thankyou much, -- Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://counter.li.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

* Sandy Drobic [06-25-07 08:26]:

To be exact, it should be added after reject_unauth_destination. the explicit version is "check_recipient_access hash:/etc/postfix/recipients_internal_only". Check_recipient_access is automatically assumed if the file was added to smtpd_recipient_restrictions.

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access hash:/etc/postfix/recipients_internal_only

Yes, and this works *until* I run SuSEconfig and then main.cf goes back to the previous version. What do I have to do to make the change stick? thanks, -- Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://counter.li.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

* Sandy Drobic [06-26-07 19:05]:

File a bugreport for that behaviour. (^-^)

I will do that

Yast should detect automatically that the md5sum of main.cf has changed and keep away from doing any further changes. Another way is to tell Yast not to configure Postfix.

It will and gives a warning and it skips main.cf , but deleting the md5sum should allow it to proceed and include main.cf

Try to set MAIL_CREATE_CONFIG="no" in /etc/sysconfig/mail.

this works, but now main.cf is not checked, no md5sum is generated. -- Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://counter.li.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Patrick Shanahan wrote:

* Sandy Drobic [06-26-07 19:05]:

...

File a bugreport for that behaviour. (^-^)

I will do that

...

Yast should detect automatically that the md5sum of main.cf has changed and keep away from doing any further changes. Another way is to tell Yast not to configure Postfix.

It will and gives a warning and it skips main.cf , but deleting the md5sum should allow it to proceed and include main.cf

That is okay, as long as SuSEConfig does not touch main.cf or master.cf anymore.

...

Try to set MAIL_CREATE_CONFIG="no" in /etc/sysconfig/mail.

this works, but now main.cf is not checked, no md5sum is generated.

Fine with me. (^-^) -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org