[Postfixbuch-users] restrictions

[Klaus Schuehler]

Hallo,

ich habe ein Problem mit bestimmten emails die Postfix durchlässt obwohl
die restrictions gesetzt sind. Hier mal ein Beispiel:


Auszug aus dem Mailclient Header:

Received: from 83.246.73.98 (unknown [61.49.190.163])
	by srv1.skon.com (Postfix) with SMTP id 7D068BAD2177;
	Fri, 28 Oct 2005 16:32:56 +0200 (CEST)
Received: from .com ([.78]) by ..com
          (Netscape Messaging Server 9.21)  with ESMTP id AAA633E
          for <BUFFHKGOG at hotmail.com>; Fri, 28 Oct 2005 20:32:55 +0500
Message-ID: <5251277.103133BUFFHKGOG at hotmail.com> 

Auszug aus den Logfiles:

Oct 28 16:32:54 srv1 postfix/smtpd[16480]: connect from unknown[61.49.190.163]
Oct 28 16:32:58 srv1 postfix/smtpd[16480]: 7D068BAD2177: 
client=unknown[61.49.190.163]
Oct 28 16:33:03 srv1 postfix/cleanup[28739]: 7D068BAD2177: 
message-id=<5251277.103133BUFFHKGOG at hotmail.com>
Oct 28 16:33:03 srv1 postfix/qmgr[24130]: 7D068BAD2177: 
from=<BUFFHKGOG at hotmail.com>, size=856, nrcpt=2 (queue active)
Oct 28 16:33:03 srv1 postfix/virtual[29225]: 7D068BAD2177: 
to=<k.schuehler at skon.net>, relay=virtual, delay=7, status=sent (delivered to 
maildir)
Oct 28 16:33:03 srv1 postfix/virtual[29225]: 7D068BAD2177: 
to=<l.schuehler at skon.net>, relay=virtual, delay=7, status=sent (delivered to 
maildir)
Oct 28 16:33:03 srv1 postfix/qmgr[24130]: 7D068BAD2177: removed
Oct 28 16:33:11 srv1 postfix/smtpd[16480]: disconnect from 
unknown[61.49.190.163]

Folgende restrictionen habe ich in der main.cf eingefügt:

roken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_use_tls = yes
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
#smtpd_tls_loglevel = 4
smtpd_recipient_restrictions = permit_sasl_authenticated,
                               reject_non_fqdn_sender,
                               permit_mynetworks,
                               reject_unauth_destination,
                               reject_non_fqdn_hostname,
                               reject_unauth_destination,
                               reject_unauth_pipelining,
                               reject_non_fqdn_recipient,
                               reject_unknown_sender_domain,
                               reject_invalid_hostname,
                               reject_rbl_client        cbl.abuseat.org,
                               reject_rbl_client        rhsbl.sorbs.net,
                               reject_rbl_client        sbl.spamhaus.org,
                               reject_rbl_client        relays.ordb.org,
                               reject_rbl_client        opm.blitzed.org,
                               reject_rbl_client        bl.spamcop.net

Merkwürdig ist nur das bei den meisten Mails ein reject richtigerweise macht.
Nur bei manchen Mails passiert das.

Mal eine Frage an die Profis. Was läuft hier schief.

Viele Grüsse Klaus