How do I whitelist a domain in Postfix?

Discussion in 'HOWTO-Related Questions' started by FatalError, Sep 11, 2009.

  1. FatalError

    FatalError New Member

    I saw one how-to covering this, but it didn't look the same as my SpamSnake setup. Anyway here is my issue:

    One of our vendors is being rejected on an SPF check.

    Someone told me that they had very recently changed ISPs.

    Here's a log entry from Postfix:

    Maybe they haven't updated their SPF record after the ISP change?

    Anyway, is there a way to whitelist their domain(s) in Postfix so my users can receive mail from them?


    UPDATE: after checking a few online dns query sites, I have determined that there is NO SPF record for either of their domain names. This doesn't sound right...

    If anyone wants a crack at this, their email server's name is mail.cbsinsne.com and their email address domain is fainsgroup.com.
     
    Last edited: Sep 11, 2009
  2. Rocky

    Rocky New Member

    You would have to use a client access list in postfix to get around this issue. Below is an example of what you would have to put in your postfix main.cf file, in the smtpd_recipient section. You just have to create a file called /etc/postfix/goodip and add the IP and OK to it eg. (2.2.2.2 OK) and then postmap it (postmap /etc/postfix/goodip). Then add the below string to postfix and do a postfix reload. This should now allow their IP through postfix. You can google check_client_access to get a better idea of the usage and syntax.

    smtpd_recipient_restrictions =
    check_client_access = hash:/etc/postfix/goodip
     
  3. FatalError

    FatalError New Member

    I am assuming that I leave all existing values on the line "smtpd_recipient_restrictions =" ?
     
  4. Rocky

    Rocky New Member

    Yes, make sure you leave the other statements in there.

    Example: smtpd_sender_restrictions = hash:/etc/postfix/access, reject_unknown_sender_domain
     

Share This Page