OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Restricting incoming connections

From: mouss (usebsdfree.fr)
Date: Sun Jul 02 2006 - 16:06:30 CDT


Paul Tader wrote:
> A client has signed up with a third party company, Postini (postini.com)
> to do addition filtering. I want to configure the local postfix server
> to now accept only incoming smtp connections from the Postini network
> instead of the entire Internet. Previously, this host was the MX server.
>
> I setup "mynetworks" to be:
>
> mynetworks = 216.141.226.0/28, 123.456.789.16/28 10.1.10.0/24
> (Postini's network, DMZ, Internal network)
>

If the server is no more an MX, then

smtpd_recipient_restrictions =
    permit_mynetworks
    permit_sasl_authenticated
    reject