Re: How to ensure that either FROM or TO is local

2010-01-04 Thread Serge Fonville
Thx for the reply. While it was intended, no doubt, to be very wrong, it failed. Lacking a valid CIDR expression, that only matches the single IPv4 address of 0.0.0.0, which, having special meaning in networking, is unroutable. A setting of equivalent functionality is mynetworks =. The OP

Re: How to ensure that either FROM or TO is local

2010-01-03 Thread Barney Desmond
Questions similar to yours come up fairly often, I'm not sure why noone's jumped in yet with a rough solution that will do what you want. What you've mentioned you want: How do I ensure that my mail server can only send mails either to or from mydomains? Consider that there are three

Re: How to ensure that either FROM or TO is local

2010-01-03 Thread Serge Fonville
I *think* the short, correct answer is to use a policy server: http://www.postfix.org/SMTPD_POLICY_README.html I will look into those then I read into http://www.postfix.org/SMTPD_POLICY_README.html, but I do not see how I can use this to solve my problem. Perhaps I am missing something... Any

Re: How to ensure that either FROM or TO is local

2010-01-03 Thread Wietse Venema
Serge Fonville: I *think* the short, correct answer is to use a policy server: http://www.postfix.org/SMTPD_POLICY_README.html I will look into those then I read into http://www.postfix.org/SMTPD_POLICY_README.html, but I do not see how I can use this to solve my problem. Perhaps I am

Re: How to ensure that either FROM or TO is local

2010-01-03 Thread Serge Fonville
Wietse, Thx for the reply The policy server can reject mail from a remote network with a local sender address. Isn't that what you want? As an added bonus, it can also reject mail from a local network with a remote sender address. This can help to stop outbound spam from zombie-infested

Re: How to ensure that either FROM or TO is local

2010-01-03 Thread /dev/rob0
On Sun, Jan 03, 2010 at 09:58:15PM +1100, Barney Desmond wrote: mynetworks = 0.0.0.0 This is *definitely* very wrong! smtpd_recipient_restrictions will allow ANY client in mynetworks to relay mail to any destination. I While it was intended, no doubt, to be very wrong, it failed. Lacking a

Re: How to ensure that either FROM or TO is local

2010-01-02 Thread Serge Fonville
Postfix, by default, only queues mail that is destined for that system (mydestination or virtual settings), included in mynetworks, or listed in relay_domains This only changes if *you* tell Postfix not to. The config below does not show any such weakness. Hmmm, so basically there is no way

How to ensure that either FROM or TO is local

2009-12-30 Thread Serge Fonville
Hi, I'm trying to install a postfix server and everything seemed to work ok. Until I tried to mail from a remote domain to a remote domain, but from 'telnet localhost 25' I understand (suspect) this works because 127.0.0.0/8 is in mynetworks. How do I ensure that my mail server can only send

Re: How to ensure that either FROM or TO is local

2009-12-30 Thread Brian Evans - Postfix List
On 12/30/2009 11:21 AM, Serge Fonville wrote: Hi, I'm trying to install a postfix server and everything seemed to work ok. Until I tried to mail from a remote domain to a remote domain, but from 'telnet localhost 25' I understand (suspect) this works because 127.0.0.0/8 is in mynetworks.

Re: How to ensure that either FROM or TO is local

2009-12-30 Thread Serge Fonville
Thx for the reply. postconf -n smtpd_banner = Infracom Mail Server Don't change this unless you have a really good reason. Some functionality can be lost by those connecting to you and the current line breaks the SMTP standard. Ok, thx I'll revert this to the default then ;-) There are

Re: How to ensure that either FROM or TO is local

2009-12-30 Thread Serge Fonville
I was wondering... smtpd_banner = Infracom Mail Server Don't change this unless you have a really good reason. Some functionality can be lost by those connecting to you and the current line breaks the SMTP standard. Ok, thx I'll revert this to the default then ;-) There are open relay