OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: "Selective" Relaying (was: Re: Sendmail vs Postfix)
From: Bennett Todd (betrahul.net)
Date: Wed Jul 05 2000 - 20:05:08 CDT

2000-07-05-18:57:48 Glen Lee Edwards:
> >Use either POP-before-SMTP or UUCP. (I haven't been paying close
> >attention of late--does Postfix have SMTP AUTH yet?)
>
> Could you expound on this? Right now I'm using:
>
> define(`SMART_HOST', `smtp:my.server.com')
>
> I'd be happy to switch my home box to Postfix if y'all can find a way for
> me to use my ISP as the selective relay box while allowing my return
> address show whatever virtual domain I need it to.

Whoa. You're talking about something completely different here. All
you need to do is

        relayhost = my.server.com

in postfix main.cf. All these say is to send all email through that
relay server, outbound, rather than trying to deliver directly.
That's the opposite of what folks thought you meant, which was the
problem of allowing mobile users to use _your_ mail server as
_their_ mail relay, while avoiding having spammers relaying off you.

If you use relayhost = my.server.com, all email that's not locally
delivered goes to the relayhost for disposition.

Mail will be locally delivered if and only if stuff on the right of
can be found in mydestination, which defaults to

        mydestination = $myhostname, localhost.$mydomain

[ That's not 100% accurate, the picture can change with virtual
domains ].

The next piece is myorigin; by default it's myhostname, you can set
it to whatever you want, it'll be appended as $mydomain after naked
addrs as long as append_at_myorigin is left with its default of
yes. This combination means it's easy to set things up so that email
to "root" ends up going to root on some other system, which can be
embarrasing; on my own system I just turn off append_at_myorigin so
I can just alias "root: bet" in my /etc/aliases, but that's because
I'm content with my MUA's abilities at ensuring that email that I
send out has properly qualified addrs everywhere it needs them.

-Bennet

  • application/pgp-signature attachment: stored