OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Open relaying

From: Ezra (ezratacedsl.com)
Date: Mon Nov 03 2003 - 00:10:17 CST


Hello All:

First, thanks to all of you for responding. Also, sorry for the foul
language. Below is my postconf -n listing.

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
allow_percent_hack = yes
append_at_myorigin = yes
append_dot_mydomain = yes
body_checks = pcre:/etc/postfix/body_checks.pcre
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_destination_concurrency_limit = 6
default_destination_recipient_limit = 10
default_extra_recipient_limit = 15
default_privs = nobody
disable_vrfy_command = yes
empty_address_recipient = MAILER-DAEMON
fallback_transport = cyrus
header_checks = pcre:/etc/postfix/header_checks.pcre
home_mailbox = maildir/
inet_interfaces = $myhostname, localhost
initial_destination_concurrency = 3
local_destination_concurrency_limit = 2
local_recipient_maps =
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
masquerade_domains = $mydomain
masquerade_exceptions = root
mydestination = $myhostname, localhost.$mydomain, $mydomain,
webmaster.$mydomain, www.$mydomain
mydomain = moontech.org
myhostname = smtp.moontech.org
mynetworks = xx.xxx.xxx.xxx/28 127.0.0.1
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /etc/postfix/readme
recipient_canonical_maps = hash:/etc/postfix/canonical
recipient_delimiter = +
relay_domains = $mydestination
sample_directory = /etc/postfix
sender_canonical_maps = hash:/etc/postfix/canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_tls_security_options = $smtpd_sasl_security_options
smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options

smtpd_banner = $myhostname ESMTP $mail_name

smtpd_client_restrictions = permit_sasl_authenticated,
hash:/etc/postfix/email_senders,
reject_rbl_client dnsbl.sorbs.net,
reject_rbl_client relays.ordb.org,
reject_rbl_client sbl.spamhaus.org
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
check_helo_access hash:/etc/postfix/helo,
hash:/etc/postfix/spammers-hash,
reject_non_fqdn_hostname

smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_recipient,
reject_non_fqdn_hostname,
reject_unknown_recipient_domain,
reject_unauth_destination,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_unauth_pipelining,
check_helo_access hash:/etc/postfix/helo,
check_recipient_access pcre:/etc/postfix/recipient_checks.pcre,
reject_rbl_client dnsbl.sorbs.net,
reject_rbl_client blackholes.easynet.nl,
reject_rbl_client proxies.blackholes.easynet.nl,
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_mynetworks,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
hash:/etc/postfix/access,
hash:/etc/postfix/spammers-hash,
check_recipient_access pcre:/etc/postfix/recipient_checks.pcre

smtpd_tls_CAfile = /etc/postfix/server.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/server.pem
smtpd_tls_key_file = /etc/postfix/server.pem
smtpd_use_tls = yes
swap_bangpath = yes
unknown_local_recipient_reject_code = 450

Michael Fleming wrote:

>On Sun, Nov 02, 2003 at 10:00:44PM -0500, Ezra waffled thusly:
>
>
>>Hello again:
>>
>> I also use ordb.org and received an email
>>stating that I'm not an open relay( I used the open-relay check).
>>
>>Mike wrote:
>>
>>
>
><snip>
>
>Can you post the output of postconf -n, in particular the
>smtpd_recipient_restrictions? This will give a better idea of where the
>problem lies.
>
>Michael.
>
>
>