1>>> # 2>>> # Initialize. 3>>> # 4>>> #! ../bin/postmap smtpd_check_access 5>>> #msg_verbose 1 6>>> smtpd_delay_reject 0 7OK 8>>> relay_domains porcupine.org 9OK 10>>> client spike.porcupine.org 168.100.3.2 11OK 12>>> # 13>>> # Check MX access 14>>> # 15>>> helo_restrictions check_helo_mx_access,inline:{168.100.3.2=reject} 16OK 17>>> helo www.porcupine.org 18./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <www.porcupine.org>: Helo command rejected: Access denied; proto=SMTP helo=<www.porcupine.org> 19554 5.7.1 <www.porcupine.org>: Helo command rejected: Access denied 20>>> helo example.tld 21./smtpd_check: warning: Unable to look up MX host example.tld for Helo command example.tld: hostname nor servname provided, or not known 22OK 23>>> helo foo@postfix.org 24OK 25>>> sender_restrictions check_sender_mx_access,inline:{168.100.3.2=reject} 26OK 27>>> mail foo@www.porcupine.org 28./smtpd_check: <queue id>: reject: MAIL from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@www.porcupine.org>: Sender address rejected: Access denied; from=<foo@www.porcupine.org> proto=SMTP helo=<foo@postfix.org> 29554 5.7.1 <foo@www.porcupine.org>: Sender address rejected: Access denied 30>>> mail example.tld 31./smtpd_check: warning: Unable to look up MX host example.tld for Sender address example.tld: hostname nor servname provided, or not known 32OK 33>>> mail foo@postfix.org 34OK 35>>> recipient_restrictions check_recipient_mx_access,inline:{168.100.3.2=reject} 36OK 37>>> rcpt foo@www.porcupine.org 38./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@www.porcupine.org>: Recipient address rejected: Access denied; from=<foo@postfix.org> to=<foo@www.porcupine.org> proto=SMTP helo=<foo@postfix.org> 39554 5.7.1 <foo@www.porcupine.org>: Recipient address rejected: Access denied 40>>> rcpt foo@example.tld 41./smtpd_check: warning: Unable to look up MX host example.tld for Recipient address foo@example.tld: hostname nor servname provided, or not known 42OK 43>>> rcpt foo@postfix.org 44OK 45>>> # 46>>> # Check NS access 47>>> # 48>>> helo_restrictions check_helo_ns_access,inline:{168.100.3.75=reject} 49OK 50>>> helo www.porcupine.org 51./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <www.porcupine.org>: Helo command rejected: Access denied; from=<foo@postfix.org> proto=SMTP helo=<www.porcupine.org> 52554 5.7.1 <www.porcupine.org>: Helo command rejected: Access denied 53>>> helo example.tld 54./smtpd_check: warning: Unable to look up NS host for example.tld: Host not found 55OK 56>>> helo foo@maildaemon.org 57./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@maildaemon.org>: Helo command rejected: Access denied; from=<foo@postfix.org> proto=SMTP helo=<foo@maildaemon.org> 58554 5.7.1 <foo@maildaemon.org>: Helo command rejected: Access denied 59>>> sender_restrictions check_sender_ns_access,inline:{168.100.3.75=reject} 60OK 61>>> mail foo@www.porcupine.org 62./smtpd_check: <queue id>: reject: MAIL from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@www.porcupine.org>: Sender address rejected: Access denied; from=<foo@www.porcupine.org> proto=SMTP helo=<foo@maildaemon.org> 63554 5.7.1 <foo@www.porcupine.org>: Sender address rejected: Access denied 64>>> mail example.tld 65./smtpd_check: warning: Unable to look up NS host for example.tld: Host not found 66OK 67>>> mail foo@maildaemon.org 68./smtpd_check: <queue id>: reject: MAIL from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@maildaemon.org>: Sender address rejected: Access denied; from=<foo@maildaemon.org> proto=SMTP helo=<foo@maildaemon.org> 69554 5.7.1 <foo@maildaemon.org>: Sender address rejected: Access denied 70>>> recipient_restrictions check_recipient_ns_access,inline:{168.100.3.75=reject} 71OK 72>>> rcpt foo@www.porcupine.org 73./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@www.porcupine.org>: Recipient address rejected: Access denied; from=<foo@maildaemon.org> to=<foo@www.porcupine.org> proto=SMTP helo=<foo@maildaemon.org> 74554 5.7.1 <foo@www.porcupine.org>: Recipient address rejected: Access denied 75>>> rcpt foo@example.tld 76./smtpd_check: warning: Unable to look up NS host for foo@example.tld: Host not found 77OK 78>>> rcpt foo@maildaemon.org 79./smtpd_check: <queue id>: reject: RCPT from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <foo@maildaemon.org>: Recipient address rejected: Access denied; from=<foo@maildaemon.org> to=<foo@maildaemon.org> proto=SMTP helo=<foo@maildaemon.org> 80554 5.7.1 <foo@maildaemon.org>: Recipient address rejected: Access denied 81>>> # 82>>> # Check A access 83>>> # 84>>> helo_restrictions check_helo_a_access,inline:{168.100.3.2=reject} 85OK 86>>> helo spike.porcupine.org 87./smtpd_check: <queue id>: reject: HELO from spike.porcupine.org[168.100.3.2]: 554 5.7.1 <spike.porcupine.org>: Helo command rejected: Access denied; from=<foo@maildaemon.org> proto=SMTP helo=<spike.porcupine.org> 88554 5.7.1 <spike.porcupine.org>: Helo command rejected: Access denied 89>>> helo www.porcupine.org 90OK 91>>> client_restrictions check_client_a_access,inline:{168.100.3.2=reject} 92OK 93>>> client spike.porcupine.org 1.2.3.4 94./smtpd_check: <queue id>: reject: CONNECT from spike.porcupine.org[1.2.3.4]: 554 5.7.1 <spike.porcupine.org[1.2.3.4]>: Client host rejected: Access denied; from=<foo@maildaemon.org> proto=SMTP helo=<www.porcupine.org> 95554 5.7.1 <spike.porcupine.org[1.2.3.4]>: Client host rejected: Access denied 96>>> client www.porcupine.org 1.2.3.4 97OK 98>>> reverse_client_restrictions check_reverse_client_a_access,inline:{168.100.3.2=reject} 99bad command 100>>> client spike.porcupine.org 1.2.3.4 101./smtpd_check: <queue id>: reject: CONNECT from spike.porcupine.org[1.2.3.4]: 554 5.7.1 <spike.porcupine.org[1.2.3.4]>: Client host rejected: Access denied; from=<foo@maildaemon.org> proto=SMTP helo=<www.porcupine.org> 102554 5.7.1 <spike.porcupine.org[1.2.3.4]>: Client host rejected: Access denied 103>>> client www.porcupine.org 1.2.3.4 104OK 105>>> sender_restrictions check_sender_a_access,inline:{168.100.3.2=reject} 106OK 107>>> mail foo@spike.porcupine.org 108./smtpd_check: <queue id>: reject: MAIL from www.porcupine.org[1.2.3.4]: 554 5.7.1 <foo@spike.porcupine.org>: Sender address rejected: Access denied; from=<foo@spike.porcupine.org> proto=SMTP helo=<www.porcupine.org> 109554 5.7.1 <foo@spike.porcupine.org>: Sender address rejected: Access denied 110>>> mail foo@www.porcupine.org 111OK 112>>> recipient_restrictions check_recipient_a_access,inline:{168.100.3.2=reject} 113OK 114>>> rcpt foo@spike.porcupine.org 115./smtpd_check: <queue id>: reject: RCPT from www.porcupine.org[1.2.3.4]: 554 5.7.1 <foo@spike.porcupine.org>: Recipient address rejected: Access denied; from=<foo@www.porcupine.org> to=<foo@spike.porcupine.org> proto=SMTP helo=<www.porcupine.org> 116554 5.7.1 <foo@spike.porcupine.org>: Recipient address rejected: Access denied 117>>> rcpt foo@www.porcupine.org 118OK 119