[postfix-jp: 4427] Re: spfとreject_unknown_clientの共存について

[happy_jp_boy <happy_jp_boy@xxxxxxxxxxx>]

æåæï

ãååééããããããçãèãããããããããã

ããããããæãçããããã
ãããããããããããèåãããããããããããã

ãããèåããããããäãäããèãããããããããspf ã
èåãããããçäããããåãããããããããã

ããããããããæéããããããspf éããã IP éåãåæ
ãããããããåãæãäçããããããããåæã IP éåã
ãæéããspf ééãããããããããã

ãããããããã

ããæãçãããããèåãåããããããäæãæåãããã
ãèçãäããããããäãããããããããæãããã

çãèãããããããããã

Wed, 27 Apr 2022 13:29:42 +0900 ãã
happy_jp_boy <happy_jp_boy@xxxxxxxxxxx> ãããæãããã:

> æææï
> 
> ãèäãããããããããããã
> 
> åæãããããã reject ãããã permit ããããæãã
> ãããããããããã
> spf ãåãããããåãããã
> spf ã check ãã OK ãã permit ãããããããã
> 
> äåãåéçãã
> 
> ãIPãããããéåãèåãããããã
> ãããããããã spf ããäè IP ãããããèãããã
> 
> ãããäæãããããåäåããããããããããèãããã
> ãããäãçãçãããããã
> 
> reject: RCPT from unknown[xxx.xxx.xxx.xxx]: 450 4.7.25 Client host rejected: cannot find your hostname
> 
> ãããããèãããsmtpd_client_restrictions ãããreject_unknown_client
> ãåããããæãèãããããããã
> 
> Client host rejected ãããääãRCPT ãããåãããããã
> ãããããæãããããããããèãããããääãäãããã
> ãããã
> 
> ããããããåãåããããã
> 
> ã
> SMTPãããããããéé(äãããããããåãããéäåå)ãæãããã
> 
> ïïãããããããããããæçãã
> ïïEHLO client.example.com (ãããããããããèãããåãéç)
> ïïAUTH CRAM-MD5 (SMTP-AUTHãããèèãéå)
> ïïZnJlZCA5ZTk1YWVlMDljNDBhZjJiODRhMGMyYjNiYmFlNzg2ZQ== (èèããããéä)
> ïïMAIL FROM:<sender@example.com> (éäèããããããããéç)
> ïïRCPT TO:<recipient@example.jp> (ååããããããããéç)
> ïïDATA (ãããææãéå)
> ïï?ääç?
> 
> ãããããæéãååããrestrictionsã
> 
> ïïsmtpd_client_restrictions
> ïïsmtpd_helo_restrictions
> ïïçã
> ïïçã
> ïïsmtpd_sender_restrictions
> ïïsmtpd_recipient_restrictions
> ïïsmtpd_data_restrictions
> 
> ãããããããã
> 
> ãããããèããïãsmtpd_client_restrictions(ãããïã
> smtpd_helo_restrictions)ãåãããïãSMTP-AUTHãèèã
> éããããããèãããããåããããããèåããïãïãï
> ãårestrictionsã6ãRCPT TO: ãããããæãèäãããããã
> ããçsmtpd_client_restrictionsãèåããããSMTP-AUTHãè
> èãæãããããäãããããã
> ã
> 
> ãããããããããããããçããããããããããã?ããã
> ãæããããã
> 
> ãããããäåãsmtpd_client_restrictions ã negative ã
> ããããããããããsmtpd_recipient_restrictions ã positive
> ãããAND æäïããããïããèããããããããããïã
> çæ Negative ã
> reject: RCPT from unknown[xxx.xxx.xxx.xxx]: 450 4.7.25 Client host rejected: cannot find your hostname
> ãåãåãããããããäæãããããïããèãçèãããã
> çãããããããï
> 
> ããããäèãæããããããããAND æäãããããOR æä
> ãããããããããèããããããããããããããåäããã
> æãããããããã OR ãåæãããããããèãããããã
> 
> åèãããããããããsmtpd_delay_reject = no ãæåããã
> ãããèäãåãæãããäãåæãææããããããããããã
> AND æäããããããIPãããããéåããããããã spf è
> äåæããéããããäãåæãããã
> 
> ããããèåãæèãããããããï
> 
> Wed, 27 Apr 2022 12:36:19 +0900 (JST) ãã
> matsumoto/Mew <matsumoto@xxxxxxxxxxxxxxxxxxxx> ãããæãããã:
> 
> > æåããï
> > 
> > éèæ:
> > 
> > ããããããèãããããïSPFãèåããããããããããï
> > smtpd_recipient_restrictionsãããããããæåãèåããã
> > ãæãããïæåãrejectããããçæäåäããããããæã
> > ãããï
> > 
> > smtpd_recipient_restrictions = permit_mynetworks,
> >   çç
> >   check_policy_service unix:private/spf-policy,
> >   reject <- åãèã
> > 
> > ããï(ãããããï)
> > 
> > 
> > Subject: [postfix-jp: 4424] spfãreject_unknown_clientãååãããã
> > Date: Wed, 27 Apr 2022 11:31:42 +0900
> > 
> > > ãããããããéèãçãããã
> > > 
> > > çåãããããããæããããããã
> > > 
> > > spf ãããããã
> > > smtpd_recipient_restrictions
> > > ãã
> > > check_policy_service
> > > ãäçãããspf ããããããããããããã
> > > 
> > > åããã
> > > smtpd_client_restrictions
> > > ã
> > > reject_unknown_client
> > > ãåãããããã
> > > 
> > > ããããèããããsmtpd_recipient_restrictionsãreject_unknown_client
> > > çãåçéåãåçãããããçèåæãããããæããããã
> > > ããæãããããæããéããåäãåçãããããããã
> > > 
> > > ãããããããã
> > > 
> > > ãSPF ãèåãããããããèå
> > > ãIP ããããéåããèåããããããèå
> > > ãäèïããããããæãããããããäèå
> > > 
> > > ãããããããããåçææããããããäèæäããããçã
> > > æãããããããããããã
> > > 
> > > ãææéãããåãããã
> > 
> > _______________________________________________
> > Postfix-jp-list mailing list
> > Postfix-jp-list@xxxxxxxxxxxxx
> > https://lists.osdn.me/mailman/listinfo/postfix-jp-list
> 
> -- 
> ããããã?ã <happy_jp_boy@xxxxxxxxxxx>
> 
> _______________________________________________
> Postfix-jp-list mailing list
> Postfix-jp-list@xxxxxxxxxxxxx
> https://lists.osdn.me/mailman/listinfo/postfix-jp-list

-- 
ããããããã <happy_jp_boy@xxxxxxxxxxx>

_______________________________________________
Postfix-jp-list mailing list
Postfix-jp-list@xxxxxxxxxxxxx
https://lists.osdn.me/mailman/listinfo/postfix-jp-list