OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Relay behaviour
From: Ralf Hildebrandt (Ralf.Hildebrandtberliner-volksbank.de)
Date: Thu Nov 02 2000 - 07:21:42 CST


Cristian Prevedello wrote:

> myhostname = penney.prosa.it
> myorigin = penney.prosa.it
> queue_directory = /var/spool/postfix
> relay_domains =
> transport_maps = hash:/etc/postfix/transport
> mynetworks = 127.0.0.0/8 213.255.48.128/29
>
> (as a side note mynetwork default value isn't guessed correctly:
> 213.255.48.0/24)

Postfix only guesses whole class A, B or C subnets.

> As you can see relay_domains is empty.
>
> So i should only relay for 213.255.48.128/29 hosts. But it also accepts to
> relay from clients with different ip addresses (10.x.x.x) whose reverse
> domain is a sub domain of $mydomain.

What is the output of :

% postconf | grep restrict
 

-- 
ralf.hildebrandtinnominate.com
system engineer                                         innominate AG
                                                 the linux architects
tel: +49-30-308806-62   fax: -77            http://www.innominate.com