OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Mail relay to own virtual domains

tech_postfix-usersnewcomsrl.it
Date: Fri Sep 11 2009 - 09:15:47 CDT


Brian Evans - Postfix List ha scritto:
> Gabriele wrote:
>
>> The problem is that my postfix does not ask for authentication if the
>> recipient is inside any virtual domains of my server, so any user can
>> connect to my postfix and send emails to any of my domains without
>> authentication! This is bad!
>>
>
> This will block all incoming internet mail too. Can Gmail, Hotmail or
> others auth? Because they are "any user".
>

Yes, this sounds clear to me.
Anyway, I could easily send unsolicited mail to any user of my domains
with no restrictions at all…
I asked a friend of mine who runs a ISP with EIMS (Eudora Internet Mail
Server): He says he can easily tell the server to distinguish between
SMTP submission and remote SMTP requests:

http://newcomsrl.it/eims.jpg

How can I accomplish the same thing with postfix?

Thank you
Gabriele