Re: [LUG] stopping external access to alias on gateway?

[Kiggundu Mukasa]

I am using postfix I know it has to do with smtpd_recipient_restrictions and /etc/postfix/access every combination I have tried using the permit_mynetworks flag to control relay of outside source IP addresses is not working I am starting to think since I have both the internal network (192.168.x.x) and 127.0.0.0/8 as mynetworks and that amavis diverts incoming mail to port 10024/10025 then it becomes a localhost mail and thus is accepted. The outside card (pointing to the Intenet) is not in mynetworks Anyone gotten something similar to work? And please don't tell me to change the MTA to solve the problem :-) Kiggs On Jun 20, 2005, at 6:56 PM, Patrick J Okui wrote: On Mon, 20 Jun 2005, Kiggundu Mukasa wrote: If you have a Linux box as a firewall/gateway also acting as the mail server, how do you stop external people sending mail to an alias that is supposed to be for internal use only (e.g. all_staff)? IMHO that's MTA specific. In exim (which is what I use) I'd have two separate routers, one for checking an alias file (or DB) for aliases that can be accessed by anyone, and another for checking another file (or DB) for those "internal" aliases with a condition that sender_domains = +localdomains (i.e that the sender's domain exists in my list of localdomains). What MTA do u happen to be attempting this with? Kiggs ****************                   ***************************** Kiggundu Mukasa                # Computer Network Consultancy### KYM-NET LTD.                   # Intranets & Internet Solutions# Plot 80 Kanjokya Street ^^^^^^^^^^^^^^^^^^^^^^^^^^ eh.. I didn't know there was a Kanjokya Street - I'd even assumed KYM-NET was on Bukoto street but I guess I stand corrected. P.O. Box 24284 Kampala, Uganda Tel:     +256 77 972255         +256 71 221141 Fax:     +256 31 262122 ***************************************************************** --  patrick ****************                   ***************************** Kiggundu Mukasa                # Computer Network Consultancy### KYM-NET LTD.                   # Intranets & Internet Solutions# Plot 80 Kanjokya Street P.O. Box 24284 Kampala, Uganda              Tel:     +256 77 972255          +256 71 221141 Fax:     +256 31 262122 *****************************************************************

_______________________________________________
LUG mailing list
LUG@linux.or.ug
http://kym.net/mailman/listinfo/lug
%LUG is generously hosted by INFOCOM http://www.infocom.co.ug/