*panic* Open relay question..?

From: Crystone AB / Daniel Sörlöv (no email)
Date: Mon Apr 01 2002 - 03:43:42 EST


 Hello!

 Using the below configuration I keep getting listed in
 ordbs wich is one thing i don't since I myself use this
 list. Could someone check and tell me what I have done
 wrong? I cant seem to get it right!

 The relays.map is a file with: somedomain.com RELAY
 (used to forward into our real mailserver wich is
  hidden behind this one)

 The deny.map is a list of adresses, hosts and
 networks with DENY (blocked)

 ETRN is a special access list? Is this perhaps not a
 good idea? What is ETRN used for?

 I have RTFM (Fine manual =) several times and still
 don't realy get a hang of it. Our users don't always
 use a fixed ip and we have no means of pop-before since
 pop is another machine (windows also sorry to say)

 What is wrong!
 Also excuse lenghiness of this mail.
 
 Plz hlp!

 Sincearly
 Daniel

queue_directory = /var/spool/postfix
command_directory = /usr/local/sbin
daemon_directory = /usr/local/libexec/postfix
mail_owner = postfix

myhostname = mail.swede.com
myorigin = mail.swede.com
mydomain = swede.com

mydestination = $myhostname
mynetworks_style = host
append_at_myorigin = no

transport_maps = hash:/etc/postfix/maps/transports.map
relay_domains = $mynetworks, hash:/etc/postfix/maps/relays.map
alias_database = hash:/etc/postfix/maps/aliases.map
alias_maps = hash:/etc/postfix/maps/aliases.map

maps_rbl_domains =
 blackholes.wirehub.net,
 dynablock.wirehub.net,
 relays.ordb.org,
 or.orbl.org,
 formmail.relays.monkeys.com,
 proxies.relays.monkeys.com
 bl.spamcop.net,
 orbs.dorkslayers.com
 dialups.relays.osirusoft.com,
 spews.relays.osirusift.com,
 spamsites.relays.osirusoft.com,
 spamhaus.relays.osirusoft.com

smtpd_delay_reject = no
smtpd_helo_restrictions =
 reject_invalid_hostname,
 permit

smtpd_client_restrictions =
# reject_unknown_client
 check_client_access hash:/etc/postfix/maps/deny.map

smtpd_sender_restrictions =
 reject_non_fqdn_sender,
 reject_unknown_sender_domain,
 permit_mynetworks,
 check_sender_access hash:/etc/postfix/maps/deny.map,
 permit

smtpd_recipient_restrictions =
 reject_non_fqdn_recipient,
 reject_unknown_recipient_domain,
 reject_unauth_pipelining,
 permit_mynetworks,
 check_sender_access hash:/etc/postfix/maps/relays.map,
 check_recipient_access hash:/etc/postfix/maps/relays.map,
 reject_unauth_destination,
 reject

smtpd_etrn_restrictions =
 permit_mynetworks,
 check_client_access hash:/etc/postfix/maps/etrn.map,
 reject

smtpd_error_sleep_time = 5
smtpd_soft_error_limit = 5
smtpd_hard_error_limit = 25

message_size_limit = 19240000

header_checks = regexp:/etc/postfix/regexp/header.utx
body_checks = regexp:/etc/postfix/regexp/body.utx

smtpd_helo_required = yes
strict_rfc821_envelopes = yes
smtpd_banner = mail.swede.com - ESMTP - Crystone Spamblock (v2.0)

notify_classes = resource, software
#, policy
double_bounce_sender = double-bounce
bounce_notice_recipient =
delay_notice_recipient =
error_notice_recipient =
empty_address_recipient = MAILER-DAEMON

local_destination_concurrency_limit = 2
default_destination_concurrency_limit = 100
default_destination_recipient_limit = 101
debug_peer_level = 2
delay_warning_time = 4

disable_vrfy_command = yes
smtp_always_send_ehlo = yes
biff = no
maximal_queue_lifetime = 1d

unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_address_reject_code = 450
non_fqdn_reject_code = 504
access_map_reject_code = 554
invalid_hostname_reject_code = 501
maps_rbl_reject_code = 554

readme_directory = /etc/postfix/README
sample_directory = /etc/postfix/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
manpage_directory = /usr/local/man
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq

-
To unsubscribe, send mail to with content
(not subject): unsubscribe postfix-users








Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD