OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: security hole -- anynomous user can send email from my postfix

From: Charles Marcus (CMarcusMedia-Brokers.com)
Date: Mon Apr 02 2007 - 05:24:06 CDT


>>> How can I use LDAP with postfix for user authentication
>>> or
>>> how to use the authentication u are asking for ?

>> start by adding
>> reject_unlisted_recipient
>> reject_unlisted_sender
>> at the top of your smtpd_recipient_restrictions.

> I have done smtpd_recipient_restrictions = reject_unlisted_sender
>
> and now I can't send mail even as a valid user. have I done anything
> wrong here ?
> please suggest.

Logs? postconf -n (to prove you made the changes)?

--

Best regards,

Charles