Arch Linux

johnvoisey

Member

Registered: 2006-11-04

Posts: 28

Postfix, SASL and RBL (spamhaus) woes.

I have discovered a most unfortunate "interaction" in my postfix configuration and although yes I have read the postfix docs either I am looking in the wrong place, or I am looking at the answer and I am too stupid to realise it. If the latter I welcome being told so, but gently, please

From time to time I find myself sitting on someone else's internet network (with their permission !!!) AND wanting to send email. To get round this in the past I would set up some sort of pop-b4-smtp or similar fiddle. I read the arch wiki and other docs on cyrus sasl, and I have set it up to work alongside my postfix mail server.

But there is a problem. You see, I am fed up of the amount of junk mail I get, so I enabled a spamhaus.org RBL in my postfix config using the "smtpd_client_restrictions = reject_rbl_client zen.spamhaus.org" line in main.cf

Now when I tried to send mail from my laptop in a friend's house through my server onto another friend I got an error message a bit like this

postfix/smtpd[5970]: NOQUEUE: reject RCPT from gibber-jabber-etc-etc-etc.ntl.com[86.0.x.y]: 554 5.7.1 Service Unavailable; Client host [86.0.x.y] blocked using zen.spamhaus.org etc etc.

What's happenning is that although my laptop has managed to establish a connection to my postfix server which gets past the bog standard "relaying denied" that would await anyone without an authenticated login, I still can't send because the other part of my postfix server says 'sorry sunny jim that IP address is flagged as being a bad lad I'm not letting you through'

What I want to do is 're-educate' my postfix server, in a sense tell it "yes I KNOW this IP address is one that has been used by naughty people to do bad things but this is ME on it now and I've just AUTHENTICATED so you know it's me so SEND the message .... !

I know it's a bit of a longshot but I am hoping that someone has experienced the same problem and can tell me "you need to do 'this' to your config file" (or even a gentle - or not so gentle - prod in the right direction would be welcome)