[postfix-jp: 4426] Re: spfとreject_unknown_clientの共存について

[happy_jp_boy <happy_jp_boy@xxxxxxxxxxx>]

æææï

ãèäãããããããããããã

åæãããããã reject ãããã permit ããããæãã
ãããããããããã
spf ãåãããããåãããã
spf ã check ãã OK ãã permit ãããããããã

äåãåéçãã

ãIPãããããéåãèåãããããã
ãããããããã spf ããäè IP ãããããèãããã

ãããäæãããããåäåããããããããããèãããã
ãããäãçãçãããããã

reject: RCPT from unknown[xxx.xxx.xxx.xxx]: 450 4.7.25 Client host rejected: cannot find your hostname

ãããããèãããsmtpd_client_restrictions ãããreject_unknown_client
ãåããããæãèãããããããã

Client host rejected ãããääãRCPT ãããåãããããã
ãããããæãããããããããèãããããääãäãããã
ãããã

ããããããåãåããããã

ã
SMTPãããããããéé(äãããããããåãããéäåå)ãæãããã

ïïãããããããããããæçãã
ïïEHLO client.example.com (ãããããããããèãããåãéç)
ïïAUTH CRAM-MD5 (SMTP-AUTHãããèèãéå)
ïïZnJlZCA5ZTk1YWVlMDljNDBhZjJiODRhMGMyYjNiYmFlNzg2ZQ== (èèããããéä)
ïïMAIL FROM:<sender@example.com> (éäèããããããããéç)
ïïRCPT TO:<recipient@example.jp> (ååããããããããéç)
ïïDATA (ãããææãéå)
ïïãääçã

ãããããæéãååããrestrictionsã

ïïsmtpd_client_restrictions
ïïsmtpd_helo_restrictions
ïïçã
ïïçã
ïïsmtpd_sender_restrictions
ïïsmtpd_recipient_restrictions
ïïsmtpd_data_restrictions

ãããããããã

ãããããèããïãsmtpd_client_restrictions(ãããïã
smtpd_helo_restrictions)ãåãããïãSMTP-AUTHãèèã
éããããããèãããããåããããããèåããïãïãï
ãårestrictionsã6ãRCPT TO: ãããããæãèäãããããã
ããçsmtpd_client_restrictionsãèåããããSMTP-AUTHãè
èãæãããããäãããããã
ã

ãããããããããããããçããããããããããããããã
ãæããããã

ãããããäåãsmtpd_client_restrictions ã negative ã
ããããããããããsmtpd_recipient_restrictions ã positive
ãããAND æäïããããïããèããããããããããïã
çæ Negative ã
reject: RCPT from unknown[xxx.xxx.xxx.xxx]: 450 4.7.25 Client host rejected: cannot find your hostname
ãåãåãããããããäæãããããïããèãçèãããã
çãããããããï

ããããäèãæããããããããAND æäãããããOR æä
ãããããããããèããããããããããããããåäããã
æãããããããã OR ãåæãããããããèãããããã

åèãããããããããsmtpd_delay_reject = no ãæåããã
ãããèäãåãæãããäãåæãææããããããããããã
AND æäããããããIPãããããéåããããããã spf è
äåæããéããããäãåæãããã

ããããèåãæèãããããããï

Wed, 27 Apr 2022 12:36:19 +0900 (JST) ãã
matsumoto/Mew <matsumoto@xxxxxxxxxxxxxxxxxxxx> ãããæãããã:

> æåããï
> 
> éèæ:
> 
> ããããããèãããããïSPFãèåããããããããããï
> smtpd_recipient_restrictionsãããããããæåãèåããã
> ãæãããïæåãrejectããããçæäåäããããããæã
> ãããï
> 
> smtpd_recipient_restrictions = permit_mynetworks,
>   çç
>   check_policy_service unix:private/spf-policy,
>   reject <- åãèã
> 
> ããï(ãããããï)
> 
> 
> Subject: [postfix-jp: 4424] spfãreject_unknown_clientãååãããã
> Date: Wed, 27 Apr 2022 11:31:42 +0900
> 
> > ãããããããéèãçãããã
> > 
> > çåãããããããæããããããã
> > 
> > spf ãããããã
> > smtpd_recipient_restrictions
> > ãã
> > check_policy_service
> > ãäçãããspf ããããããããããããã
> > 
> > åããã
> > smtpd_client_restrictions
> > ã
> > reject_unknown_client
> > ãåãããããã
> > 
> > ããããèããããsmtpd_recipient_restrictionsãreject_unknown_client
> > çãåçéåãåçãããããçèåæãããããæããããã
> > ããæãããããæããéããåäãåçãããããããã
> > 
> > ãããããããã
> > 
> > ãSPF ãèåãããããããèå
> > ãIP ããããéåããèåããããããèå
> > ãäèïããããããæãããããããäèå
> > 
> > ãããããããããåçææããããããäèæäããããçã
> > æãããããããããããã
> > 
> > ãææéãããåãããã
> 
> _______________________________________________
> Postfix-jp-list mailing list
> Postfix-jp-list@xxxxxxxxxxxxx
> https://lists.osdn.me/mailman/listinfo/postfix-jp-list

-- 
ããããããã <happy_jp_boy@xxxxxxxxxxx>

_______________________________________________
Postfix-jp-list mailing list
Postfix-jp-list@xxxxxxxxxxxxx
https://lists.osdn.me/mailman/listinfo/postfix-jp-list