[Kolab-devel] [merge67] Introduce postfix helo checking

[Gelpi Andrea]

Fabio Pietrosanti wrote:
> New submission from Fabio Pietrosanti <fp at khamsa.ch>:
> 
> # Introduce helo checking (otherwise disabled by default)
> smtpd_require_helo = yes
> smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, 
> reject_invalid_hostname, reject_unknown_hostname, reject_non_fqdn_hostname
> 
> In this way a simple and useful antispam feature is added (without breaking anything)

As I sayd before I tested it and found that reject_unknown_hostname is too 
aggressive.

There large and important farm that don't have their smtp listed in any dns.

So I modified it to have the opportunity to insert a white list for that.

This is my configuration:

smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, 
check_helo_access hash:/kolab/etc/postfix/helo_access,
  reject_invalid_hostname, reject_unknown_hostname, reject_non_fqdn_hostname


-- 
ing. Andrea Gelpi
***************************************************
La Terra non la abbiamo ereditata dai nostri avi,
ma la abbiamo presa in prestito dai nostri bambini.
***************************************************