OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Testing smtpd_client_restrictions - Was: Tcpwrappers and postfix - restricting inbound connections
From: Bennett Todd (betrahul.net)
Date: Tue Jan 02 2001 - 17:12:47 CST

2001-01-02-16:53:05 Karl O. Pinc:
> I guess if I really want _no_ dialog, not just a 554 error, I go back to
> the inetd/tcpd solution.

Or, since you only want to allow local submission, don't even bind
postfix's smtpd to an external interface at all:

        inet_interfaces = localhost

If you want it to be reachable when a local client directs a request
to $myhostname, but not to accept the TCP connection when a remote
client does, then you need to use packet filtering; ipchains can do
that on Linux, IP Filter can do that on many other Unixes.

-Bennett