* Peter Justus <peter AT acunet.co DOT za>:
> smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/access,
> check_client_access hash:/etc/postfix/access,permit_sasl_authenticated,
> permit_mynetworks, reject_non_fqdn_sender, reject_non_fqdn_recipient,
> reject_unknown_sender_domain, reject_unknown_recipient_domain,
> reject_non_fqdn_helo_hostname, reject_unauth_destination,
> reject_invalid_hostname, reject_unknown_helo_hostname,
> reject_unauth_pipelining, reject_non_fqdn_hostname, permit
This is an open relay.
Better (reordering, renaming of the maps)
smtpd_recipient_restrictions =
check_client_access hash:/etc/postfix/client_access
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
check_sender_access hash:/etc/postfix/sender_access
reject_non_fqdn_sender
reject_non_fqdn_recipient
reject_unknown_sender_domain
reject_unknown_recipient_domain
reject_non_fqdn_helo_hostname
reject_invalid_hostname
reject_unknown_helo_hostname
reject_unauth_pipelining
> smtpd_sender_restrictions = reject_unknown_address,
What is "reject_unknown_address"???
--
Ralf Hildebrandt (Ralf.Hildebrandt AT charite DOT de) plonk AT
charite DOT de
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
Ich habe hier Windows 2000 spontan f�llt mir dazu die Szene aus das
"Leben des Brian" ein, in der der Mitgefangene im Kerker Brian als
G�nstling bezeichnet, weil er vom Kerkermeister angespuckt wurde.
|
