OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: I need to accept mail (incoming) from one domain

From: Rod Whitworth (glistenwitworx.com)
Date: Wed Apr 09 2008 - 22:20:19 CDT

On Wed, 9 Apr 2008 19:51:32 -0700, johnf wrote:

>On Wednesday 09 April 2008 07:26:00 pm John Evans wrote:
>> On Wed, 9 Apr 2008, johnf wrote:
>> > I'm getting the following in the maillog:
>> > unknown smtpd restriction: "??permit_mynetworks"
>> > unknown smtpd restriction: "??reject"
>> > What have I done wrong?
>>
>> We'll need the output of 'postconf -n' to tell you that. Please provide
>> that information, and someone can help. Without that information it's
>> like shooting in the dark at a moving target.
>
>I assumed that the reader was following the thread. Actually, I keep getting
>confused about what I doing to here. I'm wondering if I should be doing
>something with the firewall and not settings in Postfix. What I want is all
>mail from outside my lan to be filtered by the filtering servers. Then only
>accept mail from the filtering servers. I'm open to suggestions!!!

You are so right!
I cannot see why you would use anything other than a firewall to do
what you want.

Why complicate your postfix configuration files? make one more thing to
remember in an upgrade or disaster recovery?

I can't tell you what to do with your firewall specifically because I
don't know what your OS/firewall details are. Logically it looks like:

Block in all ( a default rule hopefully)
Pass in on $external_interface from <table of IPs of your filter
company> to $mailserverIP port smtp
....

Result:
All traffic from outside to port 25 blocked except from filtering
people.

Nothing hard about that.

8>< snip rest of data - not needed for a solution.

On-list replies only (if any) please. Desperate off-list replies to the
reply-to address only.

Rod/

A consultant is someone who's called in when someone has painted himself into a corner. He's expected to levitate his client out of that corner.

-The Sayings of Chairman Morrow. 1984.