Re: Urgent: what's wrong with this config?

From: Magnus Bäck (no email)
Date: Sat Nov 01 2003 - 07:22:56 EST


On Sat, Nov 01, 2003 at 03:46:17AM -0800,
     kk ii <> wrote:

> The problem seems to be that options permit_mynetwork in
> smtpd_recipient_restrictions, coz the server is behind the firewall
> which has the internal nic interface which is part of the network. So
> now, no more of that.

Configure your firewall so that it doesn't proxy the connections or
source-NAT them. Your current setup will e.g. also defeat all RBL
lookups.

In the meantime, you can exclude the firewall from mynetworks.

> And I also added the smtpd_sender_restrictions as well.

That's pointless.

> A question though: how can I set the banner for my relay denied
> message?

I think you need to change the source code for that.

[...]

> smtpd_recipient_restrictions =
> permit_sasl_authenticated
> reject_unauth_destination check_relay_domains

Having both reject_unauth_destination and check_relay_domains serves no
purpose. Remove the latter.

[...]

-- 
Magnus Bäck







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD