OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Tue Apr 02 2002 - 14:11:38 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Tue, Apr 02, 2002 at 03:47:27PM -0300, Deives wrote:

    > smtp inet n - n - - smtpd
    > -o content_filter=filter:filter

    A simple smtp listener.

    > filter unix - n n - - pipe
    > flags=Rq user=mailfilt argv=/usr/bin/cont-filter -f ${sender}
    > ${recipient}
    > (it's our own content filter... hand-made :)

    A pipe mailer.

    > mynetworks_style = host
    > mynetworks = 127.0.0.0/8
    > smtpd_client_restrictions = permit_mynetworks, check_relay_domains
    > smtpd_recipient_restrictions = permit_mynetworks, check_relay_domains

    With that,, you're not an open relay.
    Please post "postconf -n" output.

    > How can I pass to the Content Filter the client IP? Or how can I get
    > postfix to check relay BEFORE passing control to the content filter? I

    That's what it does by default.

    > can post from any machine in my internal net (10.1.0.x), but this
    > configuration should be accepting relay only from localmachine...

    How did you test this?

    -- 
    Ralf Hildebrandt (Im Auftrag des Referat V A)   Ralf.Hildebrandtcharite.de
    Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
    Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
    A UNIX saleslady, Lenore Likes work, but likes the beach more.
    She found a clever way To mix work with play...
    She sells C shells by the seashore.
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users