FROM/MX_MATCHES_NOT_HELO(DOMAIN)=21.39

[Robert Felber]

On Fri, Jul 01, 2011 at 08:25:13AM -0700, Christopher Hunt wrote:
> Mr. Felber,
> Thank you for you quick reply.  I will work with the sender on those
> issues.  I will be whitelisting the send or recipient according to
> http://www.policyd-weight.org/faq.html#whitelisting.
> 
> I have an additional question though, somewhat related:  Do you generally
> recommend that policyd-weight appear last in smtp_recipient_restrictions?

Yes, as it is a expensive (latency) check.

> Here's what I have now:
> 
> smtpd_recipient_restrictions = permit_mynetworks,
>                                permit_sasl_authenticated,
>                                check_policy_service inet:127.0.0.1:12525,
>                                reject_unknown_reverse_client_hostname,
>                                reject_invalid_hostname,
>                                reject_non_fqdn_hostname
>                                reject_rbl_client zen.spamhaus,

does that work? Meaning: ommiting the .org TLD.

>                                reject_unknown_sender_domain,
>                                reject_non_fqdn_sender,
>                                reject_non_fqdn_recipient,
>                                reject_unauth_destination,
>                                reject_unlisted_recipient
> 
> 
> I wonder if I couldn't take some load off of policyd-weight by moving it to
> the end of the list..
> 
> -Chris
> 
> P.S.  the IRC server's .com web site mentioned on the website seems to down,
> but the .net is up

Thanks.

-- 
	Robert Felber, PGP: D1B2F2E5          http://www.selling-it.de