From: kk ii (no email)
Date: Sat Nov 01 2003 - 06:46:17 EST
Ok, for those who might find yourself in the same
situation that I was in an hour ago (i.e. your mail
server is being used as spam relay), here is my
config that works. Just thought I would share this.
The problem seems to be that options permit_mynetwork
in smtpd_recipient_restrictions, coz the server is
behind the firewall which has the internal nic
interface which is part of the network. So now, no
more of that.
And I also added the smtpd_sender_restrictions as
well.
A question though: how can I set the banner for my
relay denied message?
thanks
------- config starts ----------
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
default_transport = smtp
disable_vrfy_command = yes
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, $mydomain
mydomain = mydomain.com
myhostname = mail.mydomain.com
mynetworks = 192.168.0.0/24, 127.0.0.0/8,
192.168.10.0/24
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
relay_domains = $mydestination
require_home_directory = no
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_connect_timeout = 60s
smtpd_delay_reject = yes
smtpd_recipient_restrictions =
permit_sasl_authenticated
reject_unauth_destination check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_sasl_authenticated
reject_unauth_destination check_relay_domains
smtpd_tls_CAfile = /etc/postfix/rootcacert.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/server_crt.pem
smtpd_tls_key_file = /etc/postfix/server_key.pem
smtpd_use_tls = yes
__________________________________
Do you Yahoo!?
Exclusive Video Premiere - Britney Spears
http://launch.yahoo.com/promos/britneyspears/
|
|
|