On 17.09.26 um 17:45 schrieb Ralph Seichter via Postfix-users:
Most servers I've administered over the years, both personally and
professionally, ran Postfix and hosted end-user accounts.
>
Strange. My own experience is very different. The servers I encounter or
plan myself in a professional setting typically do not allow any end
users to login. Access is usually strictly limited to persons who need
to maintain Postfix itself and services around it (e.g. a local caching
DNS). I definitely don't want Joe Random User traipsing around on
critical infrastructure, and neither do most of my customers.
Hello Ralph, hello Jim,
I'm not sure you both are talking about the same use case of postfix.
On Servers that have mail transport as their main task I totally agree with
Ralph. But when it goes to servers sending notification the applications
often can't handle the unreliability of the outgoing server. The Notifications
simply get entirely lost if the outgoing server is unreachable.
Some applications might even be unable to handle externals servers. The last
case
has become rarer in the last years. But I've not seen many applications being
able
to retransmit unsuccessful notifications, yet.
That are IMHO very common use cases for a local postfix handling outgoing mail
from the local server.
In some cases a dedicated smarthost in the same failure domain as the servers
using
it might also be an option. But at least if some of the applications can't
handle external
servers that's not the case.
If you have different micro applications handled or maintained by different
people
on the same server for some reason it also might be useful to enforce specific
addresses being usable for them.
We talking about a field, where you've to think of many ways to bypass such
mechanisms
as local evil guy. But at list some of them can be already avoided. And if we
are talking
about "not sure how good this guys are enforcing the validity of sender
addresses" a
garden wall in the local postfix enforcing the expectation and making crazy
stuff
via postfix just systematically not work might be also helpful. ;-)
Kind regards,
Lars
--
Lars Kollstedt
Telefon: +49 6151 16-71027
E-Mail: [email protected]
man-da.de GmbH
Dolivostraße 11
64293 Darmstadt
Sitz der Gesellschaft: Darmstadt
Registergericht: Amtsgericht Darmstadt
Handelsregisternummer: HRB 9484
Geschäftsführer: Andreas Ebert
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
