US: 1-941-4621-069
  
Cyprus: 3-572-2052-781

Go Back   ISPsystem.com Forums > ISPmanager > General technical discussion


Reply
 
Thread Tools
Old 03-30-2011, 12:57 PM   #1
Junior Member
 
Join Date: Aug 2010
Location: Czech Republic
Posts: 23
cyberpaul is on a distinguished road
Default whitelist

Hi,

one of our customers pointed out a strange behaviour of whitelisting feature.

Environment:
ISP Manager Pro 4.3.53.1
CentOS 5.5
Postfix 2.3.3

When you put a domain on the whitelist, one would suppose you will receive email from this domain even when it's on a DNSbl. But it's not how it works. It works like this:

[ /etc/postfix/main.cf ]:
smtpd_sender_restrictions =
permit_sasl_authenticated,
check_sender_access hash:/etc/mail/access
smtpd_recipient_restrictions =
permit_sasl_authenticated,
check_recipient_access hash:/etc/mail/access,
permit_mynetworks,
reject_unauth_destination,
reject_unlisted_recipient,
reject_rbl_client truncate.gbudb.net

[ /etc/mail/access ]:
whitelisted-domain.net OK

This means that when postfix receives MAIL FROM command and the sender is whitelisted, he gets OK. That's nice.

But when postfix receives RCPT command, recipient is checked against the whitelist. But the recipient is not the whitelisted domain, recipient is local. What this means is, that when I whitelist a domain, anybody can use my server as a relay for this domain (recipient is whitelisted).

Is this a bug or a feature?
cyberpaul is offline   Reply With Quote
Old 04-04-2011, 02:53 AM   #2
ISPsystem team
 
sad's Avatar
 
Join Date: Oct 2006
Location: Irkutsk, Baikal
Posts: 25
sad has disabled reputation
Send a message via ICQ to sad
Default

Access map in postfix works almost like in sendmail. You can change postfix configuration for your needs, ispmanager will not touch it after initial setup. Removing access list checking from smtpd_recipient_restrictions may solve this "bug or feature".
sad is offline   Reply With Quote
Old 04-04-2011, 12:41 PM   #3
Junior Member
 
Join Date: Aug 2010
Location: Czech Republic
Posts: 23
cyberpaul is on a distinguished road
Default

Thanks for your reply. Can do that. But is that a desired beahviour? It's confusing.

Anyway I have one more problem - mail filters. It seems that from certain size of mail directory it's impossible to set email filters via ISP manager (cca thousand mails and more). Environment is the same as before (CentOS 5.5, ISP manager 4.3.53.1, but it is the same with 4.3.52 and 4.3.51.3 on different servers).

How to reproduce:
- in 'mailboxes' select a big mailbox
- click 'change the mail filter settings...' icon
- either click 'add mail filter' icon or double click any of existing filters

The working icon then appears and never really goes away. The 'ispmgr' process starts consuming more and more memory until the server crashes.

Log reports this:
Apr 4 11:37:13 [27440] INFO Request [81.31.34.226][root] 'func=email'
Apr 4 11:37:16 [27440] INFO Request [81.31.34.226][root] 'func=email.filter&elid=info%40domain.cz'
Apr 4 11:37:16 [27440] EXTINFO Load config '/var/www/glabasnat/data/email/domain.cz/info/.procmailrc'

It is crucial to fix this issue, thanks in advance for your reply.
cyberpaul is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 11:29 PM.