OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Relay access denied

From: /dev/rob0 (rob0gmx.co.uk)
Date: Thu Oct 06 2005 - 10:02:47 CDT


On Wednesday 2005-October-05 20:53, Tom Lopolito wrote:
> various changes to my postfix configuration file but still get "Relay
> Access Denied" when accessing my email server via a web interface
> (Squirrelmail) from anywhere other than within my local network. I've
> been pointed to a few ideas from within this mailgroup but none have
> worked. Is there anyone out there that that feels they are expert
> enough to be able to look at my main.cf and tell me what is wrong?

Expertise is not required. You simply need to understand how and why
relaying is permitted.

It's not safe to allow relaying from everywhere. Spammers will find you
and use you to spew; open relay lists will find you and help others
block anything (including real mail) you send. Postfix makes it
difficult to do this.

You can use authentication to permit relaying, but you have to enable
that in Postfix. It is not on by default. See the SASL_README document.
Whether or not squirrelmail can be configured to authenticate is a
matter to be discussed in a forum for squirrelmail.

Default relay access is controlled by the $mynetworks setting.
    http://www.postfix.org/postconf.5.html#mynetworks
Keep that page up. Refer to it. Actually refer to your own local copy.

I don't know why you want to use remote squirrelmail installs to relay.
Why not just one running on the mail server itself, or otherwise one
local (as in $mynetworks) to it? The whole thing seems strange to me.
--
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header