Edgar, thank you for the answer. I don't think that I can use virtual <users> because there are some aliases to external servers and according to the documentation (man smtpd.conf) "virtual" must match system users.
Is is possible to make a single rule that matches both, users and domains? Thanks. On Fri, Mar 4, 2016 at 8:41 PM, Edgar Pettijohn <[email protected]> wrote: > > > Sent from my iPhone > > On Mar 4, 2016, at 10:50 AM, Dickie Bennett <[email protected]> wrote: > > Hi, > > I'm running OpenSMTPD + Dovecot + Amavis on FreeBSD and I made some > mistakes configuring that I am not sure how to fix. This is my > configuration: > > pki example.com certificate "/etc/ssl/certs/example.pem" > pki example.com key "/etc/ssl/private/example.pem" > > limit mta inet4 > bounce-warn 15m > expire 2d > > listen on re0 port 25 tls pki example.com hostname example.com > auth-optional > listen on re0 port 587 tls-require pki example.com hostname example.com > auth mask-source > > # Amavisd filters > listen on lo0 port 10025 tag Filtered > > table aliases file:/etc/aliases > > accept tagged Filtered for local alias <aliases> deliver to lmtp > "/var/run/dovecot/lmtp" > accept from any for domain “example.com" relay via > "smtp://localhost:10024" > > accept from local for any relay > > > accept from any for domain "example.com" virtual <users> relay via ... > > There are a few options but basically just accept for users some kind of > way before you pass to amavis and it will probably help. I might have > misinterpreted your problems but i think this will help. Also you may try > the extras package and use the spam assassin filter instead. > > > So the problems are: 1. this configuration allows to send e-mails from > [email protected] to any user of the example.com domain through port > 25 without authentication. So. basically, OpenSMTPd allows to received > e-mails from spoofed accounts (but not sent to external addresses, of > course). This happens because of the rule that relays to Amavisd. How may I > fix that? > > 2. The other issue is that the mail queue is getting full of spam because > the Amavisd rule allows to receive emails to non-existent users but the > Filtered rule won't receive it and tries to bounce the e-mail but of > course, the spammers e-mail address doesn't exist, so it stays for 2 days > in the queue. How can I specify to the Amavisd rule to accept for aliases > given that OpenSMTPd won't allow to use aliases in a relay rule? > > Thanks for any suggestion. > >
