Hi, I'm running OpenSMTPD + Dovecot + Amavis on FreeBSD and I made some mistakes configuring that I am not sure how to fix. This is my configuration:
pki example.com certificate "/etc/ssl/certs/example.pem" pki example.com key "/etc/ssl/private/example.pem" limit mta inet4 bounce-warn 15m expire 2d listen on re0 port 25 tls pki example.com hostname example.com auth-optional listen on re0 port 587 tls-require pki example.com hostname example.com auth mask-source # Amavisd filters listen on lo0 port 10025 tag Filtered table aliases file:/etc/aliases accept tagged Filtered for local alias <aliases> deliver to lmtp "/var/run/dovecot/lmtp" accept from any for domain “example.com" relay via "smtp://localhost:10024" accept from local for any relay So the problems are: 1. this configuration allows to send e-mails from [email protected] to any user of the example.com domain through port 25 without authentication. So. basically, OpenSMTPd allows to received e-mails from spoofed accounts (but not sent to external addresses, of course). This happens because of the rule that relays to Amavisd. How may I fix that? 2. The other issue is that the mail queue is getting full of spam because the Amavisd rule allows to receive emails to non-existent users but the Filtered rule won't receive it and tries to bounce the e-mail but of course, the spammers e-mail address doesn't exist, so it stays for 2 days in the queue. How can I specify to the Amavisd rule to accept for aliases given that OpenSMTPd won't allow to use aliases in a relay rule? Thanks for any suggestion.
