Re: [Security-Discuss] Problems of SPAM with Postfix

On Tue, 2004-06-08 at 15:55, Tommaso Leonardi wrote:
> Ok, I understood that it's not at all a good idea :)
> So, what should I do to have a server that relays mail to every network 
> only from mailboxes @itm5?
> It's what I'd like to have, but I'm not sure it's possible....
> Thakyou another time for your precious help :)
> 
> Tommaso

First of all, take your mailserver offline. If you haven't configured it
correctly you WILL end up in a blacklist very soon.

You cannot block relaying by looking at the @itm5 domain in the from
address. This is easily forged.

In the TRUST AND RELAY CONTROLS section, configure which networks are
allowed to send through your mailserver.

If all the senders are on the same subnet as the mailserver you want
this:-

mynetworks_style = subnet

Otherwise you want this:-

mynetworks = 168.100.189.0/28, 127.0.0.0/8

Where you define the IP ranges that are allowed to relay through your
mailserver.

But don't just use these config parameters without understanding them.
Don't put your mailserver back online until you have read what all the
Postfix parameters mean and understand them. Then check for open
relaying at the address I gave you before.

Matt

-- 
http://www.mpcontracting.co.uk
Experts in Java development and website design

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________