OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Accept email only from local for specific addresses

From: Sandy Drobic (postfix-usersjapantest.homelinux.com)
Date: Fri Jul 28 2006 - 15:22:20 CDT


Claude Needham wrote:
> I would like to configure my postfix so that certain email addresses
> will only receive email from local (the machine itself). Other
> addresses will receive email as usual.
>
> I am toying with setting the system so that email sent to root can
> only be from the local source. This way I can get reports from various
> processes without being exposed to spam directed to rootmydomin.com
>
> Is this type of setup even possible?
> And, by the way, where can I find a reference guide that will tell me
> which addresses I can safely deny the world. I know abuse and
> postmaster must be open. But what about root or uucp, etc.?

As long as postmaster and abuse are valid for external users it's okay.

main.cf:
mynetworks = 192.168.1.0/24, 127.0.0.1
smtpd_recipient_restrictions =
        permit_mynetworks,
        reject_unauth_destination
        check_recipient_access hash:/etc/postfix/internal_only
        ...

/etc/postfix/internal_only
rootexample.com reject
uucpexample.com reject

        
With that configuration only clients from your internal network or the
server itself will be able to send mail to rootexample.com.

Sandy