12 Jan
2026
12 Jan
'26
8:28 p.m.
On 11 Jan 2026, at 05:46, Lefteris Tsintjelis via dovecot <dovecot@dovecot.org> wrote:
This should be before any other passdb
passdb {
args = /...path to.../local.rbl.sh
driver = checkpassword
result_success = continue
result_failure = return-fail}
With the above my test mail server easily became an open relay :) So one SERIOUS correction here, the result_sucess MUST BE continue-fail so the verification passes to the next passdb in chain. So the correct way to do it is:
passdb {
args = /...path to.../local.rbl.sh
driver = checkpassword
result_success = continue-fail
result_failure = return-fail}
Lefteris
On 11 Jan 2026, at 05:46, Lefteris Tsintjelis via dovecot <dovecot@dovecot.org> wrote: # This should be before any other passdb
passdb {
args = /...path to.../local.rbl.sh
driver = checkpassword
result_success = continue
result_failure = return-fail
}With the above my test mail server easily became an open relay :) So one SERIOUS correction here, the result_sucess MUST BE continue-fail so the verification passes to the next passdb in chain. So the correct way to do it is: passdb {
args = /...path to.../local.rbl.sh
driver = checkpassword
result_success = continue-fail
result_failure = return-fail
}Lefteris