Noel,
> At 08:07 AM 11/14/2005, Mark Martinec wrote:
> >I guess with 2.4.0 I can now suggest: '-o
> >smtpd_recipient_restrictions='.
>
> Don't do that. If you specify an empty
> smtpd_recipient_restrictions will tmpfail all mail and
> log a server error something like "must specify one of
> reject_unauth_destination, reject, defer" to prevent
> unintended open relay.
>
> The current "permit_mynetworks,reject" is fine, don't
> be tempted to change it.
I just realized that, thanks, I wouldn't :)
Every now and then I keep stumbling across that Postfix safety
measure:
postfix/smtpd[15263]: fatal: parameter "smtpd_recipient_restrictions":
specify at least one working instance of:
check_relay_domains, reject_unauth_destination, reject,
defer or defer_if_permit
which makes me use tricks, but I'm not complaining.
The 'permit_mynetworks,reject' is cleaner than 'permit,reject'
and it costs almost nothing.
Actually this is what I'm using at our site in order to
be able to catch potential amavisd SMTP misbehaviour.
I guess it can't hurt to put the following in README.postfix:
-o
smtpd_recipient_restrictions=reject_unauth_pipelining,permit_mynetworks,reject
-o smtpd_data_restrictions=reject_unauth_pipelining
> But it might be a good idea to add some of the newer
> restrictions to your suggested list to prevent
> surprises. If they have an older postfix without
> these options, they will be ignored and not break
> anything.
> -o smtpd_data_restrictions=
> -o smtpd_end_of_data_restrictions=
Ok, so now we have:
-o
smtpd_recipient_restrictions=reject_unauth_pipelining,permit_mynetworks,reject
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
Mark
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
