Re: Next Dumb question - mynetworks - so now I think I know

2015-02-15 Thread John
Set /mynetworks/ to 127.0.01/8and ::1,removed /permit_mynetworks/ from relay and recipient restrictions, but had to add to relay_restriction in amavis setup in master. everything seems to work. -- John Allen KLaM -- definition: Camel, a horse designed by

Re: Next Dumb question - mynetworks

2015-02-15 Thread li...@rhsoft.net
Am 15.02.2015 um 13:37 schrieb John: I think I am asking the wrong question. What would be the effects of setting /mynetworks/ to 127.0.0.1/8 and ::1/128? I assume that I would need these in order to allow inter-process communication on the server. Could I remove the /permit_mynetworks/ stanza

Re: Next Dumb question - mynetworks

2015-02-15 Thread John
I think I am asking the wrong question. What would be the effects of setting /mynetworks/ to 127.0.0.1/8 and ::1/128? I assume that I would need these in order to allow inter-process communication on the server. Could I remove the /permit_mynetworks/ stanza in my restriction classes in main?

Re: Next Dumb question - mynetworks

2015-02-14 Thread btb
> On Feb 14, 2015, at 16.14, John wrote: > > Does mynetworks have to contain anything other than 127.0.0.1/8 and ::1/128. for whatever it's worth, my personal preference is to, as a rule, always set mynetworks to empty. i make an effort to not allow relaying based on source ip address, and i

Re: Next Dumb question - mynetworks

2015-02-14 Thread Wietse Venema
John: > While looking at the various Postfix configurations that I deal with I > realized that /mynetworks/ is configured identically in all four setups. > In the three installations I support there no local users, and the > people who belonging to those domains all use port submission (587) to

Next Dumb question - mynetworks

2015-02-14 Thread John
While looking at the various Postfix configurations that I deal with I realized that /mynetworks/ is configured identically in all four setups. In the three installations I support there no local users, and the people who belonging to those domains all use port submission (587) to send and imaps