OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: SMTP permit or reject

From: mouss (usebsdfree.fr)
Date: Thu Dec 01 2005 - 13:25:03 CST


Sergio Ferreira a écrit :
> When I set:
>
> SMTPD.... =
>
> reject_...
> reject_...
> reject_...
>
> As I understood It is recommended to finish the sequence with "permit"
> option, right?

A final permit isn't required since that's the default.

rules are applied in the order they are found. try writing your site
policy in english (or native lang if you prefer, but writing'em in
english will help if you need to discuss them). then implement these rules.

Questions to ask yourself:
- which clients are allowed to (freely) relay through your server?
- do you want to enforce smtp auth for outbound mail?
- do you want to restrict some outbound senders?
- what level of hello filtering to implement?
- what level of address requirements to impose?
- which dnsbl's do you want to use?
- do you want greylisting?
...