[Fwd: Re: postfix as spam filtering server]

7 msg	question on body_checks

[Fwd: Re: postfix as spam filtering server]
\ Suhaime Raeze (14 May 2007)
. \ Gaël Lams (14 May 2007)
. . \ Suhaime Raeze (14 May 2007)
. . . \ Noel Jones (14 May 2007)
. . . . \ Suhaime Raeze (14 May 2007)
. . . . . \ Noel Jones (14 May 2007)
. . . . . \ mouss (14 May 2007)

2 msg	sender restrictions
3 msg	at what stage is message_size_limit applied?
6 msg	pipe and crashing commands
5 msg	postfix as spam filtering server
3 msg	send mail to users on the same domain but a dif...
2 msg	Map several domains to virtual accounts ?
11 msg	postfix and MySQL encrypted passwords (was 554 ...
37 msg	tcp_table query.
2 msg	Last word on epoll and Slackware 11
5 msg	Open relay by forwarding loop?
3 msg	virtual subdomains
3 msg	reject_non_fqdn_sender and reject_non_fqdn_reci...
2 msg	'554 Recipient address rejected: Relay access d...
14 msg	Bounces, stopping them entirely
1 msg	Postfix mailing list administrivia
11 msg	postfix dropping SMTP connection when receiving...
8 msg	verify.db and reject_unverified_recipient
5 msg	proxymap query

Subject:	[Fwd: Re: postfix as spam filtering server]
Group:	Postfix-users
From:	Suhaime Raeze
Date:	14 May 2007

---------------------------- Original Message ----------------------------
Subject: Re: postfix as spam filtering server
From: "Suhaime Raeze" <suhaime>
Date: Mon, May 14, 2007 7:18 pm
To: Gaël Lams <lamsgael>
--------------------------------------------------------------------------

The last part of the IP sharing concerns with the external IP port
forwarding. There are actuially TWO box in my DMZ. Port 25 is forwarded to
postfix and LDAP, webmail, pop are forwarded to qmail box.

u are rite though that it is authenticated to qmail. how do u confgure
postfix gateway??? and do i have to have sasl on my postfix since it
shouldn't authenticate in then first place...

regards

suhaime

> Hi,
>
>> question: is the setting of the firewall is the fault? or is there any
>> setting that smtp authentication should be directed to the qmail server
>
> Actually the classical way of doing what you are trying to do is to
> configure the SMTP Auth directly on your postfix gateway, instead of
> "forwarding" the smtp authentication to your qmail server (I don't
> even know if it's possible).
>
> I immagine that you have some kind of backend (ldap, mysql, ...)
> containing username and password. You have to configure SASL to
> perform the authentication on your backend and then configure postfix
> to use sasl. Once the external user is authenticated, he/she can send
> email through the postfix server.
>
>> PS..both postfix and qmail are NAT to the same MX ip address
>
> I'm not sure to understand this last sentence: normally, when you
> set-up an smtp gateway (i.e often as an anti-spam filter), you do it
> to avoid having your internal mail server directly accessible from the
> outside, normally the 2 servers are separated boxes with separated ip
> addresses, and the internal email server does not have a public ip
> address.
>
> Regards,
>
> Gaël
>