Ralf ,

> > > amavis-new unix -       -       n       -       2  smtp
> > >    -o smtp_data_done_timeout=1200
> > >    -o smtp_send_xforward_command=yes
> > >    -o disable_dns_lookups=yes
> > >    -o max_use=20
>
> Why set max_use?

See
  http://www.ijs.si/software/amavisd/amavisd-new-docs.html#max_requests
especially the last two paragraphs.

> > > 127.0.0.1:10025 inet n  -       n       -       -  smtpd
> > >    -o content_filter=
> > >    -o local_recipient_maps=
> > >    -o relay_recipient_maps=
> > >    -o smtpd_restriction_classes=
> > >    -o smtpd_delay_reject=no
>
> Why set smtpd_delay_reject=no?

So that connections to port 10025 from unauthorized clients
are dropped immediately, without waiting for RCPT TO.
This should be viewed together with:
  -o smtpd_client_restrictions=permit_mynetworks,reject
  -o mynetworks=127.0.0.0/8
and is only interesting for entries which do not limit socket bind
to a loopback interface, i.e.:
> > > 10025 inet n  -       n       -       -  smtpd

For the sites which do limit bind to a loopback interface,
the protection offered by smtpd_client_restrictions is not really
needed. Still it does not hurt to be doubly sure, and it looks better
if the same settings are used in all possible configurations.

  Mark



-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.  Get Certified Today
Register for a JBoss Training Course.  Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to