|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Restricting incoming connections
From: Wietse Venema (wietse
porcupine.org)
Date: Sun Jul 02 2006 - 11:42:02 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Paul Tader:
> A client has signed up with a third party company, Postini (postini.com)
> to do addition filtering. I want to configure the local postfix server
> to now accept only incoming smtp connections from the Postini network
> instead of the entire Internet. Previously, this host was the MX server.
>
> I setup "mynetworks" to be:
>
> mynetworks = 216.141.226.0/28, 123.456.789.16/28 10.1.10.0/24
> (Postini's network, DMZ, Internal network)
>
> and configured smtpd_recipient_restrictions in main.cf:
>
> smtpd_recipient_restrictions =
> hash:/etc/postfix/access
That will permit spam that has the right recipient address
> permit_mynetworks,
> reject_unauth_destination,
That will permit spam that has the right destination domain.
Why not replace reject_unauth_destination by reject.
Wietse
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]