OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: question regarding accepting mail

From: Magnus Bäck (magnusdsek.lth.se)
Date: Thu Sep 02 2004 - 16:54:27 CDT


On Thursday, September 02, 2004 at 23:06 CEST,
     Jim Greene <jim.greenemegalink.net> wrote:

> Is there a way I can tell my postfix server to allow my users to use
> it as their smtp server, allowing them to send mail, but only allow it
> to accept incoming smtp from my mx servers ? Is this a good idea?

One way is to list your MX servers and your clients in mynetworks and
set

smtpd_recipient_restrictions = permit_mynetworks, reject

but this will give your MX servers relay access which might be
considered a bit too permissive. In that case:

smtpd_recipient_restrictions =
        permit_mynetworks,
        check_client_access hash:/path/to/file,
        reject

/path/to/file:
1.2.3.4 permit_auth_destination

Here, 1.2.3.4 is the host address of an MX server.

--
Magnus Bäck
magnusdsek.lth.se