Postfix Overview - Introduction - SCN Research

Postfix Configuration - UCE Controls
reject the message, and a IGNORE result means delete the header from the message.
Page 2 of 10
At present, specifying a header pattern with OK serves no useful purpose. A rule ending in OK affects
only the header being matched. The next header may still result in a REJECT match, causing the mail
still to be rejected.
Examples (main.cf):
header_checks = regexp:/etc/postfix/header_checks
header_checks = pcre:/etc/postfix/header_checks
Example (header_checks):
/^to: *friend@public\.com$/ REJECT
Client hostname/address restrictions
The smtpd_client_restrictions parameter restricts what clients this system accepts SMTP connections from.
Default:
smtpd_client_restrictions =
Allow SMTP connections from any client.
Syntax:
Specify a list of zero or more restrictions, separated by whitespace or commas. Restrictions are
applied in the order as specified; the first restriction that matches wins.
Examples:
smtpd_client_restrictions = hash:/etc/postfix/access, reject_maps_rbl
smtpd_client_restrictions = permit_mynetworks, reject_unknown_client
Restrictions:
reject_unknown_client
Reject the request when the client IP address has no PTR record in the DNS. The
unknown_client_reject_code parameter specifies the response code to rejected requests (default:
450).
permit_mynetworks
Permit the request when the client IP address matches any network listed in $mynetworks.
check_client_access maptype:mapname
maptype:mapname
Search the named access database for the client hostname, parent domains, client IP address,
or networks obtained by stripping least significant octets. Reject the request if the result is
REJECT or "[45]XX text". Permit the request if the result is OK or RELAY or all-numerical.
Otherwise, treat the result as another list of UCE restrictions. The access_map_reject_code
parameter specifies the response code for REJECT results (default: 554).
reject_maps_rbl
Reject the request when the reversed client network address is listed under any of the
domains listed in $maps_rbl_domains. The maps_rbl_reject_code parameter specifies the
response code for rejected requests (default: 554).
http://www.porcupine.org/postfix-mirror/uce.html
6/26/01