OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Relaying mail in and out

From: Covington, Chris (ccovingtonplusone.com)
Date: Wed Dec 01 2004 - 12:10:27 CST


> What do I need to do to allow the server located
> inside my firewall at 10.1.1.11 to send emails
> through the linux server, but disallow open relaying?

Change your main.cf smtpd_recipient_restrictions so that it is:

smtpd_recipient_restrictions =
                permit_mynetworks,
            reject_unauth_destination,
                reject_invalid_hostname,
            reject_non_fqdn_sender,
            reject_non_fqdn_recipient,
            reject_unknown_sender_domain,
            reject_unknown_recipient_domain,
            reject_unauth_pipelining,
            reject_unauth_destination,
            check_recipient_access hash:/etc/postfix/recipient_access,
            check_helo_access regexp:/etc/postfix/helo_access,
            reject_rbl_client sbl-xbl.spamhaus.org,
            reject_rbl_client zombie.dnsbl.sorbs.net,
            reject_rbl_client dnsbl.sorbs.net,
            reject_rbl_client relays.ordb.org,
            reject_rbl_client opm.blitzed.org,
            reject_rbl_client list.dsbl.org,
            reject_rbl_client sbl.spamhaus.org,
            reject_rbl_client ws.surbl.org,
                permit

Chris