is there a way to change the order in which sendmail checks incoming messages ?
reason for asking is:
I see an incoming mail from something@blah.work for a user that doesn't exist, .work is set to deny in access, the user
is not valid,but sendmail rejects it temp with
reject=451 4.1.8 Possibly forged hostname for (ip)
so they just keep trying until it gets to a 551.....

regards
-rasp

Ralph Spitzner wrote:
> is there a way to change the order in which sendmail checks incoming messages ?

Sure, it's all in rule(set)s.

> I see an incoming mail from something@blah.work for a user that doesn't exist, .work
> is set to deny in access, the user

"set" how?

> is not valid,but sendmail rejects it temp with
> reject=451 4.1.8 Possibly forged hostname for (ip)

The default rules do not use a "Possibly forged hostname"
so a ".work" entry does not apply to {client_name}.

Please provide the actual access map entries that should apply and
let us know whether you use FEATURE(delay_checks)

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.

Claus Aßmann wrote on 8/29/21 10:29 PM:
[...]

>> is set to deny in access, the user
>
> "set" how?
>
blocked tld's contains

work REJECT

> let us know whether you use FEATURE(delay_checks)

FEATURE(delay_checks) is not set in my m4.

still, the final recipient $user@spitzner.org does not exist...

regards
-rasp

Ralph Spitzner wrote:

> work REJECT

Please use "tagged" entries as explained in cf/README:
From:cyberspammer.com REJECT
Connect:cyberspammer.com REJECT

> FEATURE(delay_checks) is not set in my m4.

Give it a try (check the docs first).

> still, the final recipient $user@spitzner.org does not exist...

I guess you rely on the internal checks for that?
If so, that's done "too late" for your purpose.
You could add some rules to explicitly check the recipient address
(or maybe use virtusertable? again: see cf/README) - together with
FEATURE(delay_checks) that most likely has the behaviour you want
to see.

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.

Claus Aßmann wrote on 8/30/21 10:43 AM:
ok, changed that I'll watch the log :-)

thanks
-rasp

Ralph Spitzner <rasp@spitzner.org> wrote:

> is there a way to change the order in which sendmail checks incoming messages ?
> reason for asking is:
> I see an incoming mail from something@blah.work for a user that doesn't exist, .work is set to deny in access, the user
> is not valid,but sendmail rejects it temp with
> reject=451 4.1.8 Possibly forged hostname for (ip)
> so they just keep trying until it gets to a 551.....

Why don't you use a milter, eg. mailfromd?
You can do much more and a lot easier.

Mike

dl8fbh@dl8fbh.ampr.org wrote on 8/31/21 12:06 PM:
[...]
> Why don't you use a milter, eg. mailfromd?
> You can do much more and a lot easier.
>
> Mike
>

since only a few usernames are affected I opted fore somethingelse I've noticed reading the doc for the n'th time:
localusername@ ERROR:550

in access.....

-rasp