OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: security hole -- anynomous user can send email from my postfix

From: mouss (mlist.onlyfree.fr)
Date: Mon Apr 02 2007 - 07:42:12 CDT


JOYDEEP wrote:
> mouss wrote:
>
>> JOYDEEP wrote:
>>
>>> Exactly I am looking for such a solution.
>>> How can I use LDAP with postfix for user authentication
>>> or
>>> how to use the authentication u are asking for ?
>>>
>>>
>> start by adding
>> reject_unlisted_recipient
>> reject_unlisted_sender
>> at the top of your smtpd_recipient_restrictions.
>>
>
> I have done smtpd_recipient_restrictions = reject_unlisted_sender
>
> and now I can't send mail even as a valid user. have I done anything
> wrong here ?
> please suggest.
>

you need to put "back" the default restrictions:

smtpd_recipient_restrictions =
    reject_unlisted_sender
    reject_unlisted_recipient
    permit_mynetworks
    reject_unauth_destination