OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Fw: receiving allmy.domain.com
From: vasudeva (vasudeva.reximsoft.com)
Date: Wed Jan 03 2001 - 05:35:14 CST


Sorry, let me rephrase my question:

Problem:
* I have put all user names on my network in the /etc/postfix/alaises file
and the alias name is "all".
* All members inside my network can send mail to allmydomain.com which
is nothing but the "all" alias.
* The problem now is, anybody from outside (internet) can also send mail to
allmydomain.com .
* Obviously this is dangerous.

Requirement:
I need to restrict mails to allmydomain.com from outside (internet).
At the same time, I also want the mails from outside sent to
allmydomain.com to be redirected to a local mailbox ( like
postmastermydomain.com).

Tested and Failed:
Reference: FAQ, topic "Protecting Internal email distribution lists".
I modified /etc/postfix/access to read the following:

/etc/postfix/access:
    all permit_mynetworks,reject

Result:
Mails from outside (internet) to allmydomain.com are still recieved.
Mails from inside are also recieved.

Awaiting your response,

Regards/Thanks

Vasudeva

----- Original Message -----
From: Michael Ju. Tokarev <mjttls.msk.ru>
To: vasudeva <vasudevareximsoft.com>
Cc: <postfix-userspostfix.org>
Sent: Sunday, December 24, 2000 12:18 AM
Subject: Re: receiving allmy.domain.com

> vasudeva wrote:
> >
> > Thanx Michael.
> >
> > But I have doubt.
> > My aliase files are:
> > 1. /etc/postfix/aliases -- this includes usual stuff + in all
portion I
> > have included all the users names.
> > 2./etc/postfix/aliases.internal --- in this I have included only
internal
> > users names.
> >
> > Now I tested internally by sending mail but now I want to test by
sending
> > mail to this account (allmy.domain.com) from outside and this has to go
to
> > any one user (I mean one use has to recv the outside mail).
> > Pls tell me how to proceed next?
>
> Sorry but I can't understand what you want. Seemed to me that this is
> something strange at least... If you want some accounts to be able to
> receive mails "from inside", but mails for them from outside should be
> directed to some other account, you should set up some other e.g. virtual
> map that lists all your internal users that should be redirected, and
> specify that map in master.cf file in smtpd command line. Note that this
> feature available only with snapshots, not in release yet. Let's draw
> an example:
>
> int1, int2 - two internal accounts that should receive mails from
> inside but not from outside. Mails for them sent from outside should
> go to `out' account.
> out - account that receives mails from outside destined for int1 and
int2
> ext1, ext2 - two "external" accounts that should be able to receive
mails
> from both inside and outside.
>
> You will need to configure separate smtp server that will listen on
> external interface, in master.cf:
>
> ext_iface_addr:smtp .. smtpd -o local_recipient_maps=hash:ext.users \
> -o virtual_maps=hash:ext.mapping
>
> ext.users file:
> ext1 OK
> ext2 OK
> ext.mapping file:
> int1 out
> int2 out
>
> For your internal network, you probably will want to specify another
> smtp server with different parameters.
>
> > Vasudeva
>
> Regards,
> Michael.