| 1 |
On Tue, Dec 6, 2011 at 11:11 AM, Michael Orlitzky <michael@××××××××.com> wrote: |
| 2 |
> On 12/06/11 11:32, Grant wrote: |
| 3 |
>> |
| 4 |
>> Got it. Your explanations are positively lucid. |
| 5 |
>> |
| 6 |
>> I added this to /etc/postifx/main.cf: |
| 7 |
>> |
| 8 |
>> postscreen_greet_action = enforce |
| 9 |
>> postscreen_pipelining_enable = yes |
| 10 |
>> postscreen_pipelining_action = enforce |
| 11 |
>> postscreen_non_smtp_command_enable = yes |
| 12 |
>> postscreen_non_smtp_command_action = enforce |
| 13 |
>> postscreen_bare_newline_enable = yes |
| 14 |
>> postscreen_bare_newline_action = enforce |
| 15 |
>> |
| 16 |
>> and I commented this and restarted postfix: |
| 17 |
>> |
| 18 |
>> #check_policy_service inet:127.0.0.1:10030 |
| 19 |
>> |
| 20 |
>> Should this effectively disable postgrey and enable postscreen? |
| 21 |
>> |
| 22 |
> |
| 23 |
> That will disable postgrey, but isn't enough to enable postscreen. There |
| 24 |
> are a couple of daemons you have to enable in master.cf (steps 2 through 6): |
| 25 |
> |
| 26 |
> http://www.postfix.org/POSTSCREEN_README.html#enable |
| 27 |
> |
| 28 |
> That README refers to lines that are commented-out in master.cf; of |
| 29 |
> course, if you've upgraded from an earlier of postfix, you won't have them. |
| 30 |
> |
| 31 |
> What I did was to untar the latest postfix release under my home |
| 32 |
> directory, and find the master.cf that ships with it. Then, I |
| 33 |
> copy/pasted the lines mentioned in the README over to my real master.cf. |
| 34 |
> |
| 35 |
> After a restart, you should see lines like this in your mail log: |
| 36 |
> |
| 37 |
> Dec 6 03:13:46 mx1 postfix/postscreen[2810]: CONNECT from ... |
| 38 |
> |
| 39 |
> that let you know its' working. |
| 40 |
|
| 41 |
Thanks for bringing up postscreen and the rest of your responses to |
| 42 |
Grant in this thread, I wasn't aware of it either. None of the HOWTOs |
| 43 |
I read ever mentioned it. :) I'm going to give it a try and see how it |
| 44 |
goes. |
Archives