sieve redirect to foreign email gets “Relay access denied”

[Reindl Harald]

Am 23.09.2014 um 20:09 schrieb Henry Stack:
> On 23-09-2014 12:31, Reindl Harald wrote:
>> [...]
>> no reason for that: smtpd_data_restrictions = reject_unauth_pipelining
> 
> its goood, the reason is to block clients who speak to early like spammers for example.
> http://www.postfix.org/postconf.5.html#reject_unauth_pipelining
> "This stops mail from bulk mail software that improperly uses ESMTP command pipelining 
> in order to speed up deliveries."

but nobody needs "smtpd_data_restrictions" for that
just add it to "smtpd_recipient_restrictions"

if you want to block spammers it's anyways the wrong tool

* use port 587 for submission
* setup http://www.postfix.org/POSTSCREEN_README.html on port 25
* postscreen_greet_action = enforce
* postscreen_greet_wait = ${stress?2}${stress:10}

with the above configuration on port 25 a sane client
has to wait 10 seconds before he is allowed to talk
the first time and only after passed that it has a
chance to talk to smtpd at all

well, and then you can configure "postscreen_dnsbl_sites" and
"postscreen_dnsbl_action = enforce" with a sensible scoring
and you are rid of 90% spam at all

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20140923/5f91819d/attachment.sig>