[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: trying to restrict postfix use of port



Camaleón on 21/01/10 15:44, wrote:
On Thu, 21 Jan 2010 14:45:25 +0000, Adam Hardy wrote:

I have set up postfix to listen as below using:

inet_interfaces = 10.20.30.40

adam@ecocore:~$ netstat -an |grep -i "listen "
>> tcp        0      0  10.20.30.40:25          0.0.0.0:*  LISTEN ***

I am not allowed to open it on 127.0.0.1 due to my vserver hosting
rules.

The point is that I don't want to have port 25 open to the world, since
I don't want to receive any emails on this system, I just want to send.

Unless you have a external IP address assigned (dedicated or shared) and your provider is redirecting incoming smtp traffic to your local address where you have configured the MTA server, there is no way that someone can establish a remote connection with your mail server host as it's using a local (non routable) ip address.

But I do have an external IP address assigned (e.g. 10.20.30.40, although it's different outside the confines of this mailing list discussion) and my hosting provider does NAT the incoming SMTP traffic to it (as standard for their firewall) and so yes it is totally routable.

I just did a little test to send messages from thunderbird on my PC here and it connects and will deliver, if I address the mail to one of the user accounts on the system.

All I'm saying is that I don't need this, and I'd like to find a way to shut it down whilst leaving the outbound mail delivery intact.



Reply to: