Re: [AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use on internal postfix server?

2006-12-01 Thread Mark Martinec
Peter,

 I thought I should send it to 192.168.0.99:10025 (the feedback from
 AMaViS to the Postfix queue) in order for it not to be double checked.

 The connections are refused: (no firewall)

 Dec  1 14:31:01 pollux.scarceskills.com
 /usr/local/sbin/amavisd[22381]: (22381-03) (!)FWD via SMTP:
 [EMAIL PROTECTED] -,
 450 4.4.1 Can't connect to 192.168.0.99 port 10025,
 Net::SMTP: connect: Connection refused

Does: 'telnet 192.168.0.99 10025' work?  Guess not.

 127.0.0.1:10025 inet n -n - - smtpd

You have restricted smtpd service to bind on a loopback
interface, which is why it won't listen on other interfaces.
Remove the restriction:

  10025 inet n -n - - smtpd
...
-o mynetworks=127.0.0.0/8,192.168.0.0/24

Mark


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Q: DMZ Using 'forward_method' - Which port to use on internal postfix server?

2006-12-01 Thread Mark Martinec
Peter,

 You have restricted smtpd service to bind on a loopback
 interface, which is why it won't listen on other interfaces.
 Remove the restriction:
 10025 inet n -n - - smtpd
  -o mynetworks=127.0.0.0/8,192.168.0.0/24

 Do you mean in master.cf, on the receiving server - remove the 10025
 line and add the 192.168.0.0/24 network to '-o my networks' ?
 Where will amavisd on this server send it's filtered contents to? (if not
 10025) Doesn't that need to be there in order to get the scanned mail back
 to the queue manager?

In master.cf on the receiving server, remove the 127.0.0.1: in front of 10025
to lift the socket bind constraint, and add the IP address (or network 
address) of the sending host to the mynetworks option on the same service, 
yielding something like:

10025 inet n  -   n   -   -   smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o myhostname=post-virus-vega.scarceskills.com
-o mynetworks=127.0.0.0/8,192.168.0.0/24
-o strict_rfc821_envelopes=yes
...


Mark

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/