All this because I have problems with my mail server, I have been using as smtp relay, how can I prevent sending email on port 25 and at the same time able to receive mail on port 25?
2013/6/25 Fabrizio Monti <[email protected]> > hello to all, > I can not understand: I would like to enable authentication on port 25 to > prevent > my server was used as a free smtp, I configured, by the book, postfix, if > I connect to telnet gives me back > > Escape character is '^]'. > 220 example.com ESMTP Postfix > ehlo example.com > 250-test.example.com > 250-PIPELINING > 250-SIZE 15360000 > 250-VRFY > 250-ETRN > 250-STARTTLS > 250-AUTH PLAIN LOGIN > 250-AUTH=PLAIN LOGIN > 250-ENHANCEDSTATUSCODES > 250-8BITMIME > 250 DSN > > > but when I try to send mail from client using port 25 without > authentication and sends the email to me, I do not want this, I do not > want it to work! Where am I doing wrong? Risce someone to tell me where > I'm wrong? > > > this is configuration of main.cf: > > smtpd_sasl_auth_enable = yes > broken_sasl_auth_clients = yes > smtpd_sasl_type = dovecot > smtpd_sasl_path = private/auth > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_unauth_destination > # > smtpd_tls_key_file = /etc/postfix/cert/smtpd.key > smtpd_tls_cert_file = /etc/postfix/cert/smtpd.crt > smtpd_tls_CAfile = /etc/postfix/cert/cacert.pem > smtpd_use_tls=yes > smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache > smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache > smtpd_tls_loglevel = 1 > > this is configuration of master.cf > > smtp inet n - n - - smtpd > submission inet n - - - - smtpd > -o smtpd_tls_security_level=encrypt > -o smtpd_sasl_auth_enable=yes > -o smtpd_sasl_type=dovecot > -o smtpd_sasl_path=private/auth > -o smtpd_sasl_security_options=noanonymous > -o smtpd_sasl_local_domain=$myhostname > -o smtpd_client_restrictions=permit_sasl_authenticated,reject > -o smtpd_sender_login_maps=ldap:/etc/postfix/ldap-user.cf > -o > smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject > > > > > Thanks a lot, > Fabrizio. > >
