On Tue, 2002-09-17 at 17:58, Matthew Weier O'Phinney wrote: > --Adrian von Bidder <avbidder@fortytwo.ch> wrote [postfix == open relay??] > There's one setting that's standard in the "main.cf" file that > supposedly turns off the open relay: > relay_domains = *.yourdomain.tld As I usually don't relay on a per domain basis, I take this one out entirely. > However, I discovered that even with this set properly, I was still > being used as an open relay -- in testing, I even ssh'd to a server > across the country with which I had set up no trust relationship vis a > vis smtp, and was able to send email via my server to a yahoo account. > What I discovered needed to be set was the following: > smtpd_client_restrictions = permit_mynetworks, reject_unknown_client > > and this line needs to occur before the relay_domains setting. After I'd > done so, any connections to my smtp server outside my local network were > denied. Hmmm. I need to receive mail on my mailserver, so this one doesn't work just like that for me. I don't have anything special in my main.cf, there's just myorigin, mydestination and mynetworks (as relevant. A few others, but they don't influence relaying). I've just run a few tests and can't see any successful relaying. The only thing that slightly annoys me with postfix is that it acceppts all invaliduser@mydmoain.tld mail, and has consequently always a few undeliverable bounces in its queue. But that's not a relay. cheers -- vbi -- secure email with gpg http://fortytwo.ch/gpg NOTICE: subkey signature! request key 92082481 from keyserver.kjsl.com
Attachment:
signature.asc
Description: This is a digitally signed message part