From: Andrew Long (alongescapewire.com)
Date: Thu Oct 25 2007 - 05:45:59 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

postfix-2.2.10-1.1.el4 on CentOS 4:

The server functions as a relay for a defined (/etc/postfix/relay-ip) number of hosts (where we have wireless guests behind that ip). I would like it to silently drop with a minimum of processing all mail for recipients at our own domain, example.com, where postfix is postbox.domain.com. (We have other mailservers which collect local mail, all working just fine, on another network.) I see a lot of mail rejected via the restrictions below which is addressed to valid domain addresses, but is definitely spam. So, I need only:

1. relay for designated ip's (seems to be working)
2. outbound mail for a few logs I send to another local system (seems working)
3. drop all other incoming mail (seems working, but too much overhead).

Will defining mydestination as simply localhost,localhost.localdomain accomplish this, or is there another way? (it is now at default)

postconf -n::
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
html_directory = no
local_recipient_maps =
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mynetworks = 127.0.0.0/8, /etc/postfix/relay-ip
newaliases_path = /usr/bin/newaliases.postfix
readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
sample_directory = /usr/share/doc/postfix-2.2.10/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions = permit_mynetworks,
        reject_invalid_hostname,
        reject_unknown_sender_domain,
        reject_non_fqdn_recipient,
        reject_rbl_client bl.spamcop.net,
        permit
smtpd_helo_required = yes
smtpd_reject_unlisted_sender = yes
unknown_local_recipient_reject_code = 550

Regards,

Andrew

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]