OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: mynetworks

From: /dev/rob0 (rob0gmx.co.uk)
Date: Fri May 20 2005 - 11:27:51 CDT


Please, we don't need HTML on the list. Thanks.

On Friday 20 May 2005 11:04, Hoang, Bach wrote:
> 1. Are the network addresses specified in the mynetworks
> parameter represent the machine addresses used to send out mails
> or the actual address of the mail server used to send out the
> mails to the outside world?

Neither. By default they are the ones which are allowed to relay. But
this is configurable by means of smtpd_recipient_restrictions.

What you describe is smtp_bind_address. And if you're behind a NAT
router, the actual IP seen by remote servers (and clients) will be
determined by the router. (In that case you might also be interested in
proxy_interfaces.)

> 2. Can I specify a range of IP addresses in the mynetworks
> parameter? e.g 10.20.30.40 through 10..20.30.49
> or do I have to specify each IP individually?

Documented:
http://www.postfix.org/postconf.5.html#mynetworks
I would suggest keeping addresses in CIDR-addressable netblocks when
possible. 10.20.30.40-49 is not, whereas 10.20.30.32/28 includes .32
through .47.
--
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header