Skip to content

fix: remove dead check_policy_service unix:private/policy reference - #4

Merged
bettertogether-bts-robot merged 1 commit into
mainfrom
fix/dead-policy-service
Jul 3, 2026
Merged

bettertogether-bts-robot merged 1 commit into
mainfrom
fix/dead-policy-service

Conversation

@bettertogether-bts-robot

Copy link
Copy Markdown
Collaborator

Summary

  • `smtpd_recipient_restrictions` referenced `check_policy_service unix:private/policy`, a Postfix policy service the Dockerfile never actually defines (only `policyd-spf` is). Every RCPT command hit "connect to private/policy: Connection refused" and rejected with 451 "Server configuration problem" — breaking mail acceptance entirely for both Discourse and CE targets.
  • Verified locally (built + ran the image standalone): message now accepted cleanly; previously rejected.

Context

Found while regression-testing the multi-domain rebuild on do-3 — Discourse's mail path (which had been working via the stock upstream image) broke once rebuilt from our fork's freshly-built image. Root cause is unrelated to the CE work itself; this dead reference appears to predate this fork.

Test plan

  • Local docker build + smoke test: message accepted cleanly (was 451 before the fix)
  • `bundle exec rspec`/rubocop/stree unaffected (no Ruby changes)
  • CI green

smtpd_recipient_restrictions referenced a Postfix policy service named
"policy" that Dockerfile never actually defines (only "policyd-spf" is
defined via postconf -M). Every RCPT command triggered a "connect to
private/policy: Connection refused" warning and a 451 "Server
configuration problem" rejection -- breaking mail acceptance entirely,
for both the Discourse and CE targets equally (this restriction isn't
per-target).

Verified locally: built the image, ran it standalone, confirmed a test
message is now accepted cleanly (previously rejected with 451).

Also drops the equivalent dead reference from the non-DMARC branch,
which now falls back to Postfix's own sane default recipient
restrictions instead of a config that was always broken.
@bettertogether-bts-robot
bettertogether-bts-robot merged commit c595b9f into main Jul 3, 2026
2 checks passed
@bettertogether-bts-robot
bettertogether-bts-robot deleted the fix/dead-policy-service branch July 3, 2026 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant