OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Postfix Archives: Are these rules ok???

Are these rules ok???


Subject: Are these rules ok???
From: Account x Mailing list (mailinglastminutetour.com)
Date: Thu Dec 02 1999 - 09:29:21 CST


Hi all,
 i'm very new to postfix and reading the various mail and the FAQ i tried to setup a postfix server on a firewall.
THe rules that i want are calsics: mail only form my domain(s) or for my domain(s).Plus a list of domains
that can use us as relay.The situation i setuped is:

smtpd_client_restrictions = permit_mynetworks,
 reject_unknown_client,
 reject_maps_rbl,
 check_client_access hash:/etc/postfix/rules/client,
 reject
########à
smtpd_recipient_restrictions = permit_mynetworks, check_relay_domains,
 reject_maps_rbl, reject_unauth_destination, permit_mx_backup,
 reject_non_fdqn_hostname, reject_unknown_recipient_domain,
 reject_non_fdqn_recipient, reject_invalid_hostname,
 reject_unknown_recipient_domain,
 check_sender_access hash:/etc/postfix/rules/recipient,
 reject_unknown_sender_domain, reject_unknown_hostname,
 check_recipient_access pcre:/etc/postfix/rules/rec_check.pcre,
 reject
##########
smtpd_sender_restrictions = permit_mynetworks, reject_maps_rbl,
 reject_non_fdqn_hostname, reject_non_fdqn_sender, reject_invalid_hostname,
 reject_unknown_hostname, reject_unknown_client,
 check_recipient_access hash:/etc/postfix/rules/sender, reject
########
smtpd_helo_restrictions = permit_mynetworks, permit_naked_ip_address,
 reject_unknown_hostname, reject_nofdqn_hostname, reject_maps_rbl,
 check_helo_access hash:/etc/postfix/rules/helo, reject

Where files are:
client
 mydomain OK
 specialdomain OK
  OK
sender
 mydomain OK
  OK
recipient
 mydomain OK
 specialdomain OK
  REJECT
sender
 mydomain OK
 specialdomain OK
  OK
###########
Well at the end of all i can send mail ONLY from client inside mydomain, nobody, alsoi in specialdomain
can do anything.
THis is not right for waht i would like to setup...
I suppose some rules overlap the other but i need to be more restrctive possible.
WIth sendmail we was spammed very well......

thanks



This archive was generated by hypermail 2b27 : Thu Dec 02 1999 - 09:30:54 CST