OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Volf, Frank (Frank.Volfnl.origin-it.com)
Date: Thu Jan 04 2001 - 04:00:00 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Mark,

    > 1. is running 2 postfixes, one binding internally, one binding
    > externally.
    > On the external: pretent it's a normal mail host, accepting only
    > specified domain, with transport entry to the internal postfix, or
    > delivering to the hosts directly
    > On the internal: use a smtpd_client_restriction, rejecting all, except
    > the allowed smtp servers

    I'm trying to get rid of this (seperate sendmail process on the internal and
    the external interface). But you probably know that :-)

    > 2. trying to somehow get this in one postfix.cf, using a dirty
    > combination of the above.
    > using client restrictions, rejecting 10.*, accepting
    > 10.0.0.10 (whatever
    > your mailserver's IP addresses are), and accepting the rest; combined
    > with normal check_relay_domain functionality

    I'm trying that, but it tends to become very complex.

    Regards,

                  Frank