SMTP restrictions

[Yvonne]

Hello,
I have to tune my SMTP restictions because sone users complains.
So I want to know the differences between "Client host rejected: cannot find your hostname" and "Helo command rejected: Host not found".

My MTA restrictions are :
[zimbra@mail2 ~]$ zmprov gacf | grep zimbraMtaRestriction
zimbraMtaRestriction: reject_non-fqdn_hostname
zimbraMtaRestriction: reject_non_fqdn_sender
zimbraMtaRestriction: reject_unknown_client
zimbraMtaRestriction: reject_unknown_hostname
zimbraMtaRestriction: reject_unknown_sender_domain
zimbraMtaRestriction: reject_rbl_client dnsbl.njabl.org
zimbraMtaRestriction: reject_rbl_client opm.blitzed.org
zimbraMtaRestriction: reject_rbl_client relays.ordb.org
zimbraMtaRestriction: reject_rbl_client cbl.abuseat.org
zimbraMtaRestriction: reject_rbl_client bl.spamcop.net

But now I want "Helo command rejected: Host not found" to pass through but I want to open the minimum !

[claros]

Hello,
I have to tune my SMTP restictions because sone users complains.
So I want to know the differences between "Client host rejected: cannot find your hostname" and "Helo command rejected: Host not found".

1) Postifix make a dns query to find the hostname related to the ip address of the client
2) Postifix make a dns query to find the ip address related the the hostname given at EHLO prompt

My MTA restrictions are :
[zimbra@mail2 ~]$ zmprov gacf | grep zimbraMtaRestriction
zimbraMtaRestriction: reject_non-fqdn_hostname
zimbraMtaRestriction: reject_non_fqdn_sender
zimbraMtaRestriction: reject_unknown_client
zimbraMtaRestriction: reject_unknown_hostname
zimbraMtaRestriction: reject_unknown_sender_domain
zimbraMtaRestriction: reject_rbl_client dnsbl.njabl.org
zimbraMtaRestriction: reject_rbl_client opm.blitzed.org
zimbraMtaRestriction: reject_rbl_client relays.ordb.org
zimbraMtaRestriction: reject_rbl_client cbl.abuseat.org
zimbraMtaRestriction: reject_rbl_client bl.spamcop.net

But now I want "Helo command rejected: Host not found" to pass through but I want to open the minimum !

As to me you are blocking too match, I'm using these settings:
zimbraMtaRestriction: reject_invalid_hostname
zimbraMtaRestriction: reject_non_fqdn_hostname
zimbraMtaRestriction: reject_non_fqdn_sender
zimbraMtaRestriction: reject_unknown_sender_domain
zimbraMtaRestriction: reject_rbl_client dnsbl.njabl.org
zimbraMtaRestriction: reject_rbl_client relays.ordb.org
zimbraMtaRestriction: reject_rbl_client sbl.spamhaus.org
zimbraMtaRestriction: check_policy_service inet:127.0.0.1:2501

The last settings is related to this hack:
Connecting to SqlGrey

Ciao

[Yvonne]

OK, I will try your settings ... except for the grey-listing !