[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Postfix - Sasl



Saluds listeros escribo nuevamente por que sigo teniendo el problema de
que un usuario sin autentificarce en Outlook puede enviar un correo local
y mi postfix no lo rechaza. Muestro nuevamente como quedo mi
configuracion. Gracias de antemano

#--control de correo entrante / saliente--#
mynetworks = /etc/postfix/smtp_ip_permit
mydestination = $myhostname, $mydomain, localhost.$mydomain, localhost

#--habilitar el soporte sasl en el postfix--#
smtp_sasl_auth_enable = no
smtpd_helo_required = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
disable_vrfy_command = yes

#--host que pueden hacer smtp definidos en mynetworks--#
smtpd_client_restrictions =
    permit_sasl_authenticated,
    permit_mynetworks,
    reject

#--restrinciones nacionales y la une--#
smtpd_restriction_classes  =
    inter_out,
    nac_in,
    nac_out,
    yahoo_in,
    yahoo_out,
    admin_in

smtpd_sender_restrictions =
     check_recipient_access hash:/etc/postfix/_usuarios_admin_in,
     check_recipient_access hash:/etc/postfix/_usuarios_nac_in,
     check_recipient_access hash:/etc/postfix/_usuarios_yahoo_in,
     permit_sasl_authenticated,
     reject_non_fqdn_sender
     permit

smtpd_recipient_restrictions =
     permit_sasl_authenticated,
     permit_mynetworks,
     check_sender_access hash:/etc/postfix/_usuarios_nac_out,
     check_sender_access hash:/etc/postfix/_usuarios_yahoo_out,
     check_sender_access hash:/etc/postfix/_usuarios_inter_out,
     reject_non_fqdn_recipient,
     reject_unknown_recipient_domain,
     reject_unauth_destination,
     reject

inter_out =
       permit

admin_in  =
       check_recipient_access regexp:/etc/postfix/_filtro_admin,
       reject

nac_out  =
       check_recipient_access regexp:/etc/postfix/_filtro_nac,
       reject

nac_in =
       check_sender_access regexp:/etc/postfix/_filtro_nac,
       reject

yahoo_in =
       check_sender_access regexp:/etc/postfix/_filtro_yahoo,
       reject

yahoo_out  =
       check_recipient_access regexp:/etc/postfix/_filtro_yahoo,
       reject

smtpd_data_restrictions = reject_unauth_pipelining


-- 
 _________________________________________
/ Joan Manuel López de la Cruz            \
| Administrador de Red                    |
| Phone: (0121) 383421                    |
| Phone: (0121) 383465 Ext. 314           |
| Jabber: joanmanuel@jb.elecgtm.une.cu    |
| Jabber: joanmanuel@jb.une.cu            |
| Jabber: joanmanuel_l@yahoo.es           |
| Linux User# 490001                      |
\ Web: http://blog-admin.elecgtm.une.cu   /
 -----------------------------------------
   \
    \
        .--.
       |o_o |
       |:_/ |
      //   \ \
     (|     | )
    /'\_   _/`\
    \___)=(___/


Reply to: