[pfx] Completely discard outgoing mail not originating from postfix

Hi,

I would like to completely cut off all mail leaving my servers that have not originated from a FreeBSD jail running postfix (plus rspamd).

These are my measures taken sofar:

#) Using FreeBSD's pf firewall functionality to block all traffic leaving my 
   servers via ports 25, 465, and 587, respectively, that has not originated 
   in a FreeBSD jail running postfix

#) Disallow relaying except for SALS authenticated users:
	smtpd_relay_restrictions =
	        permit_sasl_authenticated
	        reject_unauth_destination

#) Deny local mail submission to all users:
	authorized_submit_users =


All my test are showing that my goal has been achieved, *but* I may have overseen something I should prevent, as well. Have I?

Any feedback is highly appreciated.

Thanks and regards,
Michael

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]