OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Accepting mail from roadwarriors for forwarding to other domains.

From: Alex Satrapa (alex.satrapaapf.edu.au)
Date: Mon May 15 2006 - 04:13:53 CDT


On 15 May 2006, at 15:57, Rod Whitworth wrote:

> For some time we have been using a facility called authpf ( a part
> of the pf (Packet Filter)
> firewall available in most, if not all *BSDs).

> Is there a way to permit relaying from any access to 587 that would
> not be allowed on 25?
>
> I'd love to avoid all the sasl/tls whatever...... auth stuff.

It boggles the mind to contemplate such a convoluted architecture as
authpf would seem less complex than simply setting up SASL and be
done with it.

However, one way to handle port 587 differently is to pass the config
directly to the smtpd on the command line, through the master.cf
file. I would guess (but don't quote me) at something like this:

hostname:587 unix - - y - 10 smtpd
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=
  -o ... (any other options you need for sender/recipient maps, etc
that would normally be in main.cf)

or some such.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)
Comment: I love my Mac =)

iEYEARECAAYFAkRoRlgACgkQqG6Gi520VAPzsgCg4s0RAybaY5Dlsu2TDwROdm/h
ANMAnAgRzit9TrW0ittwuKWIkMGk6B4+
=Vquy
-----END PGP SIGNATURE-----