RE: [sentinix-list] postfix as E-Mail Gateway

I have sentinix setup with exactly the configuration you are asking for.  I have an IPCOP box for the firewall with Exchange 2003 for the mail server.  

You will have to run the Sentinix setup program and make sure you select the option to use "MailScanner and Spamassassin"  I think it is the last checkbox in the setup menu.  After that you will need to modify the postfix and postfix.mailscanner.out configurations.  

In the /etc/postfix/master.cf place a # symbol in front of the line
local	unix - N N - - local
This will disable local delivery of mail to the sentinix box since we want it to relay to the exchange server.

In the /etc/postfix/main.cf make the following changes
Change the line relay_domains = $mydestination yourdomain.com to reflect your internet domain

Add the following line
smtpd_recipient_restrictions = permit_mynetworks check_relay_domains

In the /etc/transport file add the following line

yourdomain.com smtp:[x.x.x.x] 

Obviously replace yourdomain.com with your actual domain and change the x.x.x.x to the internal IP address of your exchange server.  Make sure you leave the brackets around the ip address.

Next you must run "postmap /etc/postfix/transport" to commit the changes to the transport.db file

Now we have to change the /etc/postfix.mailscanner.out configuration

In the /etc/postfix.mailscanner.out/master.cf change the smtp and relay lines to this

smtp	unix	-	-	n	-	-	smtp -v
relay	unix	-	-	n	-	-	smtp -v

In the /etc/postfix.mailscanner.out/main.cf add the following lines
mydestination = $myhostname
myorigin = yourdomain.com
relay_domains = $mydestination yourdomain.com
smtpd_recipient_restrictions = permit_mynetworks check_relay_domain

lastly, modify the /etc/postfix.mailscanner.out/transport file just like you did for the postfix directory, and don't forget to run 
postmap /etc/postfix.mailscanner.out/transport 

The above changes will allow the sentinix box to receive mail from the internet and forward it to your exchange box.  Once you have tested that mail is being delivered to exchange you then can start locking down the spam by making changes to MailScanner
The configuration files are in /opt/MailScanner/etc.  

I hope this helps.  You might also want to take a look at http://www.geocities.com/scotthenderson/spamfilter.html.  He does an excellent job of explaining how to configure postfix.  

Dennis M. Hayes


-----Original Message-----
From: sentinix-bounces-y1CeFY8bYInMlQukkHbAVdBPR1lH4CV8@public.gmane.org [mailto:sentinix-bounces-y1CeFY8bYInMlQukkHbAVdBPR1lH4CV8@public.gmane.org] On Behalf Of Steinbacher Manfred
Sent: Tuesday, April 06, 2004 5:24 AM
To: [email protected]
Subject: [sentinix-list] postfix as E-Mail Gateway

Hello

 

I´m new in sentinix but I thing this is a very good project.

 

I have a leased line internet connection with a firewall (IPCop) and have
many spam and virus-mails. The mail-server is exchange 5.5.

Now I want to install a Mail-Gateway (this should also check for spam and
virus) in a DMZ of the Firewall.

Can I use sentinix (postfix and the other tools which are in this
distribution) for this? 

 

 

Best Regards

Mit freundlichen Grüssen

Manfred Steinbacher

 

Fa. Karl Scheucher GesmbH

Zehensdorf 29

A-8092 Mettersdorf

 

Phone: +43 3477 2330 64

Mobil: +43 664 8273540

Fax: +43 3477 2330 49

Mailto:  <mailto:manfred.steinbacher-4JSDOlDEshR4Lj/[email protected]>
manfred.steinbacher-4JSDOlDEshR4Lj/[email protected]

 

 *********************************************************************

CONFIDENTIAL

The contents of this email and any attachments may be confidential.  It is
intended for the named recipient(s) only. If you are not the named
recipient, please notify the sender immediately and do not disclose the
contents to any other person or make any copies.

 

This footnote also confirms that this email message has been swept for the
presence of computer viruses.

*********************************************************************

 

_______________________________________________
SENTINIX mailing list
[email protected]
http://elevenprospect.com/mailman/listinfo/sentinix