Re: Whitelisting from reverse DNS checks

2013-07-22 Thread L.W. van Braam van Vloten
Hello list, Thanks for the info, in a different thread I also saw a reference to http://postfix.1071664.n5.nabble.com/smtpd-recipient-restrictions-Best-Practices-td10171.html and it helped me to modify my config. In addition I upgraded to Postfix 2.9.3 because I want to start using

Re: Whitelisting from reverse DNS checks

2013-07-22 Thread L.W. van Braam van Vloten
Hi, Thanks for your clear reply, that really helps! One last question: How should I configure local_recipient_maps? Noel said: local_recipient_maps = An empty local_recipient_maps will cause your postfix to accept mail for undeliverable local address, then attempt to bounce

Whitelisting from reverse DNS checks

2013-07-19 Thread L.W. van Braam van Vloten
Hello list, I have configured postfix to not accept connections from clients that fail the reverse dns check. But I want to be able to whitelist specific clients, even if the reverse hostname check fails.   To achieve this I configured the following: smtpd_client_restrictions =    

Re: Secure relay from specific internet host to internet

2013-04-22 Thread L.W. van Braam van Vloten
Hi, While it's easy enough to spoof single IP packets, it's far more difficult to spoof a whole SMTP conversation. Very well. If adding the IP address to mynetworks provides sufficient security against abuse of my server, I will leave it to that. Thanks for the advice. Lucas

Secure relay from specific internet host to internet

2013-04-18 Thread L.W. van Braam van Vloten
Hello list, I would like to to use my postfix implementation to relay mail from one specific host on the internet, to any address on the internet. The idea is that the external host will send name in my name, i.e. it will appear to come from my domain. I can allow the specific IP address to