Re: sender check

2009-11-26 Thread Ralf Hildebrandt
* Marco Giardini :

> > smtpd_recipient_restrictions = 
> > permit_mynetworks permit_sasl_authenticated reject
> > 
> > Wietse
> 
> i do use:
> smtpd_recipient_restrictions =
> permit_mynetworks
> permit_sasl_authenticated
> reject_unauth_destination
> 
> but it seems from the log that spammer still send me and to other
> local users spam mails.
> Humm...strange

Not strange. Look at the difference in the two configs.
The solution is right there.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de



Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini:
> * Wietse Venema  [2009-11-26 12:20:19 -0500]:
> 
> > Marco Giardini:
> > > I have a barracuda server that receives mails, filter them  and forward 
> > > to a
> > > linux system running postfix.
> > > 
> > > Both machine have a public IP (static).
> > > 
> > > The linux system is configured to be used as SMTP for sasl authenticated
> > > users as well, besides to be used as SMTP for the people on $mynetworks
> > > (permit_mynetworks in the smtpd_recipient_restrictions).
> > > 
> > > Unfortunatley, some spammers, have found it and use to spam local 
> > > recipients
> > > using the linux machine, avoiding so to be filtered through the barracuda
> > > system.
> > > 
> > > I'm wondering if there is a way to allow OLNY local users or users 
> > > belonging
> > > to the domains hosted by the linux server to use SMTP.
> > 
> > To permit only local systems (incl. barracuda box), or users that
> > have a relationship with your server:
> > 
> > smtpd_recipient_restrictions = 
> > permit_mynetworks permit_sasl_authenticated reject
> > 
> > Wietse
> 
> i do use:
> smtpd_recipient_restrictions =
> permit_mynetworks
> permit_sasl_authenticated
> reject_unauth_destination

I wrote:

vv
permit_mynetworks permit_sasl_authenticated reject
^^
Wietse


Re: sender check

2009-11-26 Thread John Peach
On Thu, 26 Nov 2009 18:29:00 +0100
Marco Giardini  wrote:

> * Wietse Venema  [2009-11-26 12:20:19 -0500]:
> 
> > Marco Giardini:
> > > I have a barracuda server that receives mails, filter them  and forward 
> > > to a
> > > linux system running postfix.
> > > 
> > > Both machine have a public IP (static).
> > > 
> > > The linux system is configured to be used as SMTP for sasl authenticated
> > > users as well, besides to be used as SMTP for the people on $mynetworks
> > > (permit_mynetworks in the smtpd_recipient_restrictions).
> > > 
> > > Unfortunatley, some spammers, have found it and use to spam local 
> > > recipients
> > > using the linux machine, avoiding so to be filtered through the barracuda
> > > system.
> > > 
> > > I'm wondering if there is a way to allow OLNY local users or users 
> > > belonging
> > > to the domains hosted by the linux server to use SMTP.
> > 
> > To permit only local systems (incl. barracuda box), or users that
> > have a relationship with your server:
> > 
> > smtpd_recipient_restrictions = 
> > permit_mynetworks permit_sasl_authenticated reject
> > 
> > Wietse
> 
> i do use:
> smtpd_recipient_restrictions =
> permit_mynetworks
> permit_sasl_authenticated
> reject_unauth_destination
> 
> but it seems from the log that spammer still send me and to other
> local users spam mails.
> Humm...strange

Not at all; try reading what Wietse wrote.

reject, NOT reject_unauth_destination.

> 
> mg
> 
> 
> 


-- 
John


Re: sender check

2009-11-26 Thread Marco Giardini
* Wietse Venema  [2009-11-26 12:20:19 -0500]:

> Marco Giardini:
> > I have a barracuda server that receives mails, filter them  and forward to a
> > linux system running postfix.
> > 
> > Both machine have a public IP (static).
> > 
> > The linux system is configured to be used as SMTP for sasl authenticated
> > users as well, besides to be used as SMTP for the people on $mynetworks
> > (permit_mynetworks in the smtpd_recipient_restrictions).
> > 
> > Unfortunatley, some spammers, have found it and use to spam local recipients
> > using the linux machine, avoiding so to be filtered through the barracuda
> > system.
> > 
> > I'm wondering if there is a way to allow OLNY local users or users belonging
> > to the domains hosted by the linux server to use SMTP.
> 
> To permit only local systems (incl. barracuda box), or users that
> have a relationship with your server:
> 
> smtpd_recipient_restrictions = 
> permit_mynetworks permit_sasl_authenticated reject
> 
>   Wietse

i do use:
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination

but it seems from the log that spammer still send me and to other
local users spam mails.
Humm...strange

mg





Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini:
> I have a barracuda server that receives mails, filter them  and forward to a
> linux system running postfix.
> 
> Both machine have a public IP (static).
> 
> The linux system is configured to be used as SMTP for sasl authenticated
> users as well, besides to be used as SMTP for the people on $mynetworks
> (permit_mynetworks in the smtpd_recipient_restrictions).
> 
> Unfortunatley, some spammers, have found it and use to spam local recipients
> using the linux machine, avoiding so to be filtered through the barracuda
> system.
> 
> I'm wondering if there is a way to allow OLNY local users or users belonging
> to the domains hosted by the linux server to use SMTP.

To permit only local systems (incl. barracuda box), or users that
have a relationship with your server:

smtpd_recipient_restrictions = 
permit_mynetworks permit_sasl_authenticated reject

Wietse


sender check

2009-11-26 Thread Marco Giardini
I have a barracuda server that receives mails, filter them  and forward to a
linux system running postfix.

Both machine have a public IP (static).

The linux system is configured to be used as SMTP for sasl authenticated
users as well, besides to be used as SMTP for the people on $mynetworks
(permit_mynetworks in the smtpd_recipient_restrictions).

Unfortunatley, some spammers, have found it and use to spam local recipients
using the linux machine, avoiding so to be filtered through the barracuda
system.

I'm wondering if there is a way to allow OLNY local users or users belonging
to the domains hosted by the linux server to use SMTP.

Thanks

 

MG