postfix

doronunu · 08-04-2006, 10:06 AM

if i dont want to restrict any ip or u can say, if i want any ip be able to send from my postfix machine, what should i set in the mynetwork option if i should set it at all. by the way what is the default?
can i restrict only by the domain?

Child of Wonder · 08-04-2006, 01:28 PM

You could put in 0.0.0.0/0 but that will make your machine an open relay if it's exposed to the internet. Then you'll get on every blacklist imaginable and all mail sent from your server will be rejected.

Just set up SMTP Auth with SASL.

Should be a guide on how to do it here or search on Google.

doronunu · 08-04-2006, 02:56 PM

im already set sasl. but tnx.
im aware about open relay and other security issues.

Berhanie · 08-04-2006, 08:55 PM

Quote:

can i restrict only by the domain?

Yes. I suppose you mean the domain which is the reverse lookup of the connection IP.
You'll need to have something like

Code:

smtpd_recipient_restrictions = 
   permit_mynetworks 
   check_client_access hash:/etc/postfix/access_clients
   reject_unauth_destination

This will allow anyone in mynetworks and domains listed in access_clients to send mail anywhere.
See postconf(5) for details. Also take a look at access(5) for access table formats.
I don't see a need to modify mynetworks.