Quantcast
Channel: iRedMail
Viewing all articles
Browse latest Browse all 47934

regex in postfix helo_access.pcre

$
0
0

==== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
====

Had email rejected from a verizon mail server:

2014-01-07T13:22:03.751839-05:00 linux01 postfix/smtpd[15742]: connect from unknown[206.46.173.5]
2014-01-07T13:22:03.861794-05:00 linux01 postfix/smtpd[15742]: NOQUEUE: reject: RCPT from unknown[206.46.173.5]: 554 5.7.1 <vms173005pub.verizon.net>: Helo command rejected: Go away, bad guy; from=<xxxxxxxx@verizon.net> to=<blah@blah.com> proto=ESMTP helo=<vms173005pub.verizon.net>
2014-01-07T13:22:03.934627-05:00 linux01 postfix/smtpd[15742]: disconnect from unknown[206.46.173.5]

I believe it was rejected because of this line in  /etc/postfix/helo_access.pcre

/^[0-9.]+$/     REJECT Go away, bad guy (not RFC compliant).

because the sending mailserver had numbers in it's name: helo=<vms173005pub.verizon.net>

i've changed this line in helo_access.pcre to one that should only catch actual IP addresses in teh helo

/\b((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4}\b/  REJECT Go away, bad guy (not RFC compliant).

thoughts?


Viewing all articles
Browse latest Browse all 47934

Trending Articles