> > You can use the standard firewall setup (as described in the faq) and only
> > add the backbone SMTP servers to $mynetworks. That way other internal
> > clients are handled just like any other internet host (which means it
> > doesn't relay mail to other destinations)
>
> As far as I can understand the policy of mr Volf's company, the firewall
> should not accept mail from internal users for internal domains as well.
> So you need a bit more strict checking there.

If that really is an issue (which I think it's not, because no user will
use a mail-server that relays only part of it's mail for long) then one
can add a simple client_restriction that rejects all internal hosts (after
permit_mynetworks, which contains the backbone SMTP servers)

Bye
Thomas

-- 
Kiss your keyboard goodbye!

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]