OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Accept email only from local for specific addresses

From: Claude Needham (gxxaxxgmail.com)
Date: Fri Jul 28 2006 - 17:51:31 CDT


On 7/28/06, Sandy Drobic <postfix-usersjapantest.homelinux.com> wrote:
> Claude Needham wrote:
> > I would like to configure my postfix so that certain email addresses
> > will only receive email from local (the machine itself). Other
> > addresses will receive email as usual.

> As long as postmaster and abuse are valid for external users it's okay.
>
>
> main.cf:
> mynetworks = 192.168.1.0/24, 127.0.0.1
> smtpd_recipient_restrictions =
> permit_mynetworks,
> reject_unauth_destination
> check_recipient_access hash:/etc/postfix/internal_only
> ...
>
>
> /etc/postfix/internal_only
> rootexample.com reject
> uucpexample.com reject
>
>
> With that configuration only clients from your internal network or the
> server itself will be able to send mail to rootexample.com.
>
> Sandy

This works great!

I tested from external and internal.
The external email was refused.
But I could receive from one of the internal processes sending me
email on the machine.

I checked around at sample main.cf files I could find on line.
They all seemed to ahve the check_recipient_access after reject_rbl_client.
I am assuming this is correct.

smtpd_recipient_restrictions =
       permit_sasl_authenticated,
       permit_mynetworks,
       reject_unauth_destination,
       reject_rbl_client relays.ordb.org,
       reject_rbl_client list.dsbl.org,
       reject_rbl_client sbl-xbl.spamhaus.org,
       check_recipient_access hash:/etc/postfix/internal_only

By the way, do I need to run a postfix reload after updating the
internal_only hash?

Claude Needham
p.s. thanks again to this list for great help.