John Andersen wrote:
> I've discovered that the default Postfix install as done in openSUSE 10.2
> and SLES9 provides an open relay for anyone on the same subnets
> as the mail server.
>   
That is basically stated in Yast2, System, etc/Sysconfig Editor, where
it says
File: /etc/sysconfig/postfix
Possible Values: subnet, host, class
Default Value: subnet
Configuration Script: postfix
Description:


 The postfix default for this setting is "subnet"
 for security reasons you should use host
 otherwise every user in the same subnet as you, can use
 your postfix server as a mail relay for spam.
 If you set POSTFIX_DIALUP to "yes" mynetworks_style
 will be set to "host" by SuSEconfig.

Mine was set to host, but I no longer remember if I did that or
Yast/SuSEconfig did it.
> By adding the line:
> mynetworks = 192.168.2.0/24, 127.0.0.0/8
> you can prevent this, but Yast does not offer that as
> best I can see, so you have to remember to do it
> manually.
>   
You do need to add it manually, but you could add POSTFIX_ADD_MYNETWORKS
to /etc/sysconfig/postfix to edit this easily with Yast's sysconfig editor.


-- 
Joe Morris
Registered Linux user 231871 running openSUSE 10.2 x86_64






-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to