OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Relay behaviour
From: Cristian Prevedello (plasmaprosa.it)
Date: Thu Nov 02 2000 - 07:24:54 CST

On Thu, Nov 02, 2000 at 02:21:42PM +0100, Ralf Hildebrandt wrote:
> Cristian Prevedello wrote:
>
> > myhostname = penney.prosa.it
> > myorigin = penney.prosa.it
> > queue_directory = /var/spool/postfix
> > relay_domains =
> > transport_maps = hash:/etc/postfix/transport
> > mynetworks = 127.0.0.0/8 213.255.48.128/29
> >
> > (as a side note mynetwork default value isn't guessed correctly:
> > 213.255.48.0/24)
>
> Postfix only guesses whole class A, B or C subnets.
>
> > As you can see relay_domains is empty.
> >
> > So i should only relay for 213.255.48.128/29 hosts. But it also accepts to
> > relay from clients with different ip addresses (10.x.x.x) whose reverse
> > domain is a sub domain of $mydomain.
>

empty_address_recipient = MAILER-DAEMON
notify_classes = resource,software
smtp_skip_quit_response = yes
smtpd_client_restrictions =
smtpd_etrn_restrictions =
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,check_relay_domains
smtpd_restriction_classes =
smtpd_sender_restrictions =
unknown_address_reject_code = 450

(they are the default values). 

-- 
Cristian Prevedello, System Administrator at Prosa Labs
+39.049.804.3.411 tel, +39.049.803.6.484 fax
plasmaprosa.it, http://www.prosa.it/
Italians do it better