OK, nobody has anything to say on this?
On Fri, Apr 11, 2014 at 1:13 AM, Thijssen jul...@gmail.com wrote:
We decided to create a special MX for just the bulk mailings within
our IP-block, the datacentre network we maintain. Here's where my
questions arise:
The setup is as follows:
- We have many servers within the same range, 10.20.30.x (I'll use
IPv4 only for ease now),
some of them have websites and/or are shared hosting servers that are
using a SaaS home-made mailing-GUI for their newsletters and similar
high volume recipient list mails.
- Our primary MX that needs to send out the bulk for them all is 10.20.30.7
- Is there a way to NOT have to tell postfix to allow the sending
domain names, but just the server's IP-addresses that hold those who'd
like to send out those mails via 10.20.30.7 ?
I would basically like them to use any (valid domain's) from-field
they want, and postfix would have to allow it because the source is
one of our own servers.
How do I configure that?
The postfix config mentions 'relay domains', an IP address is not a domain.
Below is my config, it does not want to relay mail from those local
servers and I'm not sure why. Do I really have to note down all
from-field domains as allowed or what is the best way to accomplish
this? I have commented out a lot in this config, because I'm working
on getting it as perfect as possible for our purpose.
Thanks in advance for any and all feedback on this config, feel free
to add improvements:
[root@somemailer~]# cat /etc/postfix/main.cf
smtpd_banner = $myhostname ESMTP $mail_name
#relay_domains = $mydestination, somemailer.net
#relay_recipient_maps =
#relayhost =
#transport_maps = hash:/etc/postfix/transport
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
ddd $daemon_directory/$process_name $process_id sleep 5
alias_maps = hash:/etc/aliases
sendmail_path = /usr/sbin/sendmail.postfix
#newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
readme_directory = /usr/share/doc/postfix-2.8.14/README_FILES
inet_protocols = ipv4
# :-/ inet_protocols = all
inet_interfaces = 10.20.30.7, 127.0.0.1
smtp_bind_address =
mynetworks = 127.0.0.0/8 [::1]/128 192.168.2.0/24, 10.20.30.0/24
smtpd_authorized_xforward_hosts = 127.0.0.0/8 [::1]/128 192.168.2.0/24
10.20.30.0/24
smtp_send_xforward_command = yes
mydomain = somemailer.net
myhostname = bulk.somemailer.net
myorigin = $myhostname
mydestination = $myhostname, localhost.$mydomain, localhost,
$mydomain, mailer.$mydomain
recipient_delimiter = +
# tempfailed adapted to 3 minutes:
queue_run_delay = 180s
minimal_backoff_time = 180s
maximal_backoff_time = 3601s
disable_vrfy_command = yes
biff = no
default_process_limit = 1000
trigger_timeout = 1
# ? in_flow_delay = 1s
smtpd_delay_reject = yes
smtpd_sender_restrictions = permit_mynetworks, reject_non_fqdn_sender,
reject_unknown_sender_domain, check_sender_access
hash:/etc/postfix/sender_access, permit
smtpd_data_restrictions = reject_multi_recipient_bounce,
reject_unauth_pipelining, permit
smtpd_client_restrictions = permit_mynetworks
smtpd_relay_restrictions = permit_mynetworks,
reject_unauth_destination, permit_sasl_authenticated
smtpd_recipient_restrictions = reject_unauth_destination,
reject_invalid_hostname, reject_non_fqdn_recipient,
reject_unknown_recipient_domain, check_client_access
hash:/etc/postfix/whitelist, reject_unauth_pipelining,
reject_non_fqdn_sender, reject_unknown_sender_domain,
reject_rbl_client bl.spamcop.net, reject_rbl_client
hosts.rbl.zonnet.net, reject_rbl_client virbl.dnsbl.bit.nl,
reject_rbl_client bl.shlink.de, reject_rbl_client bl.blocklist.de,
reject_rbl_client spamguard.leadmon.net, reject_rbl_client
mail-abuse.blacklist.jippg.org, permit
default_destination_concurrency_limit = 0
smtp_destination_concurrency_limit = 0
slow_destination_concurrency_failed_cohort_limit = 100
smtp_destination_rate_delay = 1s
slow_destination_rate_delay = 1
smtp_extra_recipient_limit = 10
smtp_connect_timeout = 30
smtp_extra_recipient_limit = 10
smtpd_timeout = 3600s
smtpd_proxy_timeout = 3600s
smtpd_error_sleep_time = 2s
smtpd_soft_error_limit = 8
smtpd_hard_error_limit = 18
smtpd_recipient_limit = 120
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_reject_footer = For assistance, contact us at
hostmas...@somemailer.nl, and please provide the following information
in your problem report: time ($localtime), client ($client_address)
and server ($server_name).
smtpd_client_message_rate_limit = 48
smtpd_client_recipient_rate_limit = 30
queue_minfree = 12288
qmgr_message_active_limit = 12000
qmgr_message_recipient_limit = 12000
qmgr_site_hog_factor = 100
bounce_size_limit = 15
mailman_destination_recipient_limit = 1
mailbox_size_limit = 0
