Re: Disabling user submission on port 25

2013-08-28 Thread Stan Hoeppner
On 8/27/2013 6:34 PM, John Allen wrote: On 27/08/2013 6:09 PM, Jeroen Geilman wrote: A simpler way to do that would be to not put these networks in mynetworks. If I remember correctly the question was how do I stop local users using port 25, while allowing them to access port 587. I felt

Re: Disabling user submission on port 25

2013-08-27 Thread Stan Hoeppner
On 8/26/2013 10:24 PM, John Allen wrote: I based it something that Noel Jones wrote way back in 2008. I doubt that Noel suggested anything like this. Create a file of the networks you wish to deny access to eg. “Deny_Mynetworks_Access” the content of which will be the same networks as those

Re: Disabling user submission on port 25

2013-08-27 Thread btb
On 2013.08.27 00.32, LuKreme wrote: That seem like a bit much. I allow the web-server (which hosts the webmail) in mynetworks, since users mailing from there are already authenticated. I can see there are situations where it would be a good idea. web mail users should perform proper smtp

Re: Disabling user submission on port 25

2013-08-27 Thread John Allen
On 8/26/2013 10:24 PM, John Allen wrote: I based it something that Noel Jones wrote way back in 2008. I doubt that Noel suggested anything like this. Create a file of the networks you wish to deny access to eg. “Deny_Mynetworks_Access” the content of which will be the same networks as those

Re: Disabling user submission on port 25

2013-08-27 Thread Noel Jones
On 8/27/2013 11:36 AM, John Allen wrote: On 8/26/2013 10:24 PM, John Allen wrote: I based it something that Noel Jones wrote way back in 2008. I doubt that Noel suggested anything like this. 2008 was a long time ago, possibly I've learned a thing or two since then. Regardless, I think this

Re: Disabling user submission on port 25

2013-08-27 Thread Jeroen Geilman
On 08/27/2013 05:24 AM, John Allen wrote: On 26/08/2013 9:00 PM, Noel Jones wrote: On 8/26/2013 7:49 PM, LuKreme wrote: OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings.

Re: Disabling user submission on port 25

2013-08-27 Thread LuKreme
On 27 Aug 2013, at 16:09 , Jeroen Geilman jer...@adaptr.nl wrote: A simpler way to do that would be to not put these networks in mynetworks. Right. I have nothing in mynetworks but the two servers that sit next to each other. No one on the LAN is in mynetworks. I was hesitant on taking the web

Re: Disabling user submission on port 25

2013-08-27 Thread John Allen
On 27/08/2013 6:09 PM, Jeroen Geilman wrote: On 08/27/2013 05:24 AM, John Allen wrote: On 26/08/2013 9:00 PM, Noel Jones wrote: On 8/26/2013 7:49 PM, LuKreme wrote: OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people

Disabling user submission on port 25

2013-08-26 Thread LuKreme
OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings. What do I do to prevent users sending via port25? -- Trying? if you quote yoda, i swear upon everything holy that i will book

Re: Disabling user submission on port 25

2013-08-26 Thread Noel Jones
On 8/26/2013 7:49 PM, LuKreme wrote: OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings. What do I do to prevent users sending via port25? Super easy... # main.cf

Re: Disabling user submission on port 25

2013-08-26 Thread John Allen
On 26/08/2013 9:00 PM, Noel Jones wrote: On 8/26/2013 7:49 PM, LuKreme wrote: OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings. What do I do to prevent users sending via

Re: Disabling user submission on port 25

2013-08-26 Thread LuKreme
On 26 Aug 2013, at 19:00 , Noel Jones njo...@megan.vbhcs.org wrote: # main.cf smtpd_sasl_auth_enable = no Oh, right, of course. (I also needed to remove my fixed IP at home from my networks, which is why I was still able to send out via my machine). -- NOBODY LIKES SUNBURN SLAPPERS Bart

Re: Disabling user submission on port 25

2013-08-26 Thread LuKreme
On 26 Aug 2013, at 21:24 , John Allen j...@klam.ca wrote: remove the permit_mynetworks from all the various smtpd__restrictions stanzas of main.cf. Then modify the master.cf by adding -o smtpd_client_restrictions=hash:Deny_Mynetworks_Access,. to the smtp service, and add -o