creating a whitelist

I want to allow mail from some of my clients through without getting stopped.
I believe the best way to do this is via a "whitelist".

I have found the following information and would like some feedback on whether it is correct, or if there is a better way of achieving the same end result.

You can create a whitelist that will accept messages from certain addresses or domains. For example:

#
# main.cf
#
smtpd recipientrestrictions =
permit_mynetworks
reject unauthdestination
...
check senderaccess hash:/etc/postfix/whitelist
reject rblclient dnsbl.njabl.org
...

#
# whitelist
#
@customer_domain.com OK

Make sure the whitelist check occurs before the reject rblclient check. Remember that email addresses are easily faked. Whenever you add whitelisting to your configuration be very careful that you don't expose your server to open relaying. Make sure that your whitelisting occurs after reject unauthdestination (or another rejection restriction).


TIA

Tony

Xserve, Mac OS X (10.4.8), Intel and PPC systems

Posted on May 11, 2007 2:14 AM

Reply
4 replies

May 11, 2007 7:49 AM in response to Tony Baker

This will only whitelist at the postfix level. So mail could still get stopped at the content-filter level.

A simpler method is to create a whitelist for spamassassin.
See here:
http://discussions.apple.com/thread.jspa?messageID=3584616&#3584616

Having said that, you should only whitelist if you see your client's mails get blocked. Whitelists based on a domain name are usually not a good idea. A sender's domain can be easily spoofed. By whitelisting a domain you are also whitelisting anybody spoofing that domain.

It would be safer to whitelist based on the customer's mail server IP.

Again, only if needed. Unless your customer has a blacklisted IP, poorly configured mail server or is a spammer, there is little reason your mail server should refuse it.

Alex

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

creating a whitelist

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.