I'll try to answer myself.
As i see, the options "from local" and "for local" is the defaults, and can
be omitted?
So, the first match can be cut to
match action "mbox" ??
the my first question i have understood, if "from local" is the default,
than it will not work without "from any"
the second question was about "from any" in the 4th match. I see, if i try
to send email, i connect to egress, so this is not local, and will not
work. also i cant use "from <domains>"
and in trird match, mails from dkim proxy come to lo0, so they are
processed as local and the rule can be extended to:
match from local tag DKIM for any action "relay" am i right?

so the last question, can i limit mta to inet4 only?

ср, 31 окт. 2018 г. в 15:04, Илья Коскин <kasakof...@gmail.com>:

> Hello list! Please look at my match-action definitions:
> action "mbox" mbox alias <aliases>
> action "mda" mda "/usr/local/bin/procmail" alias <aliases>
> action "relay" relay
> action "relay_dkim" relay host smtp://
> match for local action "mbox"
> match from any for domain <domains> action "mda"    #2nd match
> match tag DKIM for any action "relay"                           #3rd match
> match auth from any for any action "relay_dkim"          #4th match
> I have some questions about matches.
> 1) If I remove "from any" in the second match, smtpd will not accept any
> mail from internet. Why?
> 2) In the 4th match, again, without "from any" I can't send mail to
> anywhere. How can I know, where i need to use "from any" and where i don't?
> For example 3rd match work without "from any"
> 3) is this config comosed secure and correctly?
> maybe it is option to use
> match auth from <domains> for any action "relay_dkim" ?
> if this work, it can partially help to prevent spamming from compromised
> users.
> Also, is there any way to limit mta sending only from ipv4?
> Thank's!

Reply via email to