[courier-users] Re: Selectively allowing illegal domains?

Jay Lee <jlee <at> pbu.edu> writes:

>
> Lloyd Zusman wrote:
> >
> > [ ... ]
> >
> > I'm already using SPF, and I'm telling courier not to reject the mail when
> > SPF checks fail, but rather, to just have courier write the SPF-Received
> > headers, which I then check in some home-grown courierfilter modules. I
> > decide at that point whether to accept or reject the email.
> >
> > What I might be able to do is to turn off BOFHCHECKDNS, and then within
> > my home-grown courierfilter, I can reject all sender domains which fail
> > SPF's dns check ... except that handful of internal domains from work.
>
> The SPF change sounds overly complicated and it means your mailserver
> will be accepting invalid mail in these cases. I wouldn't recommend it.

Thanks again for your reply. Actually, the server doesn't accept in
this case. The courierfilter processing takes place during the smtp
dialog, before it concludes, and I can therefore reject messages with
a 5xx smtp error code from those filters, if I wish.


> If you know the IP Addresses of the servers that are sending the invalid
> email you may be able to use smtpaccess to turn off the dns checks for
> these addresses:
>
> x.x.x.x allow,BOFCHECKDNS=0
>
> Try that and see if it works.

Thanks, this is a good idea. Sadly, however, it didn't work. Apparently,
the BODCHECKDNS=1 in the esmtpd configuration file causes the initial
domain check to take place before smtpaccess is consulted.

Oh well ... (sigh) ...


--
Lloyd Zusman
ljz@asfast.com
God bless you.

.---------, 0__0
/ ( oo'---,
/ oo\
,\ |
| \ ,=__/
\ /
/ /------| /|
|__|-' |__|'






-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users