From: "Dieter Kluenter" on
hello,
I have added a private restriction class to main.cf

smtpd_recipient_restrictions =
check_recipient_access hash:/etc/postfix/distribution_lists.cf,
reject_unauth_destination
# RESTRICTION CLASS
smtpd_restriction_classes = distribution_list_01
distribution_list_01 = check_sender_access ldap:/etc/postfix/distribution_list_01-access.cf,
reject

this restriction class is working successful in a test environment
with postfix-2.6.7 and gentoo x86_64

while in a procduction environment with postfix-2.6.5 and gentoo
x86_64 this restriction class is ignored.
The full output of postconf -n and excerts from smtp.log are provided
her:
the successful logs
http://pastebin.de/8223

the ignoring system
http://pastebin.de/8224

any hints why this class is ignored on the production server?

-Dieter

--
Dieter Klünter | Systemberatung
sip: 7770535(a)sipgate.de
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6

From: Magnus =?iso-8859-1?Q?B=E4ck?= on
On Tuesday, July 13, 2010 at 09:11 CEST,
Dieter Kluenter <dieter(a)dkluenter.de> wrote:

> I have added a private restriction class to main.cf
>
> smtpd_recipient_restrictions =
> check_recipient_access hash:/etc/postfix/distribution_lists.cf,
> reject_unauth_destination
> # RESTRICTION CLASS
> smtpd_restriction_classes = distribution_list_01
> distribution_list_01 = check_sender_access ldap:/etc/postfix/distribution_list_01-access.cf,
> reject
>
> this restriction class is working successful in a test environment
> with postfix-2.6.7 and gentoo x86_64
>
> while in a procduction environment with postfix-2.6.5 and gentoo
> x86_64 this restriction class is ignored.
> The full output of postconf -n and excerts from smtp.log are provided
> her:
> the successful logs
> http://pastebin.de/8223
>
> the ignoring system
> http://pastebin.de/8224

Why is the production system talking about permit_sasl_authenticated
in the recipient restrictions when there is no mention of it in
smtpd_recipient_restrictions? Are you by any chance setting
smtpd_recipient_restrictions in the production system's master.cf,
overriding what you've got in main.cf?

--
Magnus B�ck
magnus(a)dsek.lth.se

From: "Dieter Kluenter" on
Magnus Bäck <magnus(a)dsek.lth.se> writes:

> On Tuesday, July 13, 2010 at 09:11 CEST,
> Dieter Kluenter <dieter(a)dkluenter.de> wrote:
>
>> I have added a private restriction class to main.cf
>>
>> smtpd_recipient_restrictions =
>> check_recipient_access hash:/etc/postfix/distribution_lists.cf,
>> reject_unauth_destination
>> # RESTRICTION CLASS
>> smtpd_restriction_classes = distribution_list_01
>> distribution_list_01 = check_sender_access ldap:/etc/postfix/distribution_list_01-access.cf,
>> reject
>>
>> this restriction class is working successful in a test environment
>> with postfix-2.6.7 and gentoo x86_64
>>
>> while in a procduction environment with postfix-2.6.5 and gento>> x86_64 this restriction class is ignored.
>> The full output of postconf -n and excerts from smtp.log are provided
>> her:
>> the successful logs
>> http://pastebin.de/8223
>>
>> the ignoring system
>> http://pastebin.de/8224
>
> Why is the production system talking about permit_sasl_authenticated
> in the recipient restrictions when there is no mention of it in
> smtpd_recipient_restrictions? Are you by any chance setting
> smtpd_recipient_restrictions in the production system's master.cf,
> overriding what you've got in main.cf?

No, definitely not, master.cf and main.cf are almost identical on both
systems, just cross checked.

-Dieter

--
Dieter Klünter | Systemberatung
sip: 7770535(a)sipgate.de
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6