* Márcio Luciano Donada <mdon...@auroraalimentos.com.br>:

> command_time_limit = 1h
Why change this?

> inet_protocols = all
Default, why set this explicitly?

> mydomain = domain.com.br
> myhostname = mx.domain.com.br

Setting myhostname to mx.domain.com.br implies mydomain = domain.com.br

> relay_domains = $mydestination
You can probably set:
relay_domains =

> smtpd_banner = $myhostname ESMTP
Default, why set this explicitly?

> smtpd_client_restrictions = check_client_access hash:/etc/postfix/maps/access
What's in here?

> smtpd_delay_reject = yes
Default, why set this explicitly?

> smtpd_recipient_limit = 12
Way too low. The default is fine.

> smtpd_recipient_restrictions = 
>   check_recipient_access hash:/etc/postfix/maps/user-qa.cf,
>   reject_non_fqdn_recipient , 
>   reject_unknown_recipient_domain,
>   permit_sasl_authenticated, 
>   permit_mynetworks,
>   reject_unauth_destination,

This is not an open relay unless /etc/postfix/maps/user-qa.cf contains
some strange entries. Please show it.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de
            

Reply via email to