OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Accept from anyone, send from authenticated

From: Ivan Sagalaev (ManiacSoftwareManiacs.Org)
Date: Thu Dec 06 2007 - 02:22:19 CST


Magnus Bäck wrote:
> Logs and "postconf -n" output, please.

Here's `postconf -n` output as it is now. It's a configuration when I
can connect to my host, authenticate and send mail to anyone. Now I just
can't figure out how to accept connections from unauthenticated clients
but deliver only locally in this case.

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = localhost
myhostname = softwaremaniacs.org
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_client_restrictions = permit_sasl_authenticated, reject
smtpd_recipient_restrictions = permit, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes

P.S. mydestination is 'localhost' instead of $myhostname because now
mail form my domain is stored on a different server. This is actually
what I want to fix.