OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Wietse Venema (wietseporcupine.org)
Date: Thu Jan 04 2001 - 08:31:29 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Volf, Frank:
    > > 2. trying to somehow get this in one postfix.cf, using a dirty
    > > combination of the above.
    > > using client restrictions, rejecting 10.*, accepting
    > > 10.0.0.10 (whatever
    > > your mailserver's IP addresses are), and accepting the rest; combined
    > > with normal check_relay_domain functionality
    >
    > I'm trying that, but it tends to become very complex.

    Can be done. Specify in master.cf

        /etc/postfix/master.cf:
            inside.ip.addr:smtp ... smtpd
                -o smtpd_client_restrictions=hash:/etc/postfix/inside_ok,reject
            outside.ip.addr:smtp ... smtpd
            127.0.0.1:smtp ... smtpd

    The first line allows you to override the main.cf setting for
    smtpd_client_restrictions, for example with an access map that
    lists authorized inside clients.

        /etc/postfix/inside_ok:
            ip.addr.one OK
            ip.addr.two OK
            host.name OK

    The -o option was added somewhere around May 2000.

            Wietse