Re: Open Relay issue - ReadList.com

5 msg	postfix/ldap - can one special_result_attribute...
2 msg	mailing list goes to bulk / spam folder
9 msg	SMTP Auth on multiple instances
4 msg	Auto-response, but not vacation
4 msg	bypassing reject_rbl_client for certain recipie...
12 msg	rewritten log
11 msg	Per user SPF and Anti Virus checks
9 msg	Instance on policies
2 msg	Removing internal mailers from headers

Open Relay issue
\ Carlos Jimenez Barranco (31 Mar 2008)
. \ mouss (31 Mar 2008)
. \ Carlos Jimenez Barranco (31 Mar 2008)
. . \ mouss (31 Mar 2008)
. \ Carlos Jimenez Barranco (31 Mar 2008)
. . \ mouss (31 Mar 2008)
. \ Carlos Jimenez Barranco (2 Apr 2008)

1 msg	Messages not picked up from active queue
3 msg	Semantics question about myorigin
22 msg	mime, header_checks question
3 msg	problem using greylist and gmail
9 msg	451 4.3.0 Error: queue file write error and vir...
5 msg	Network_biopair_interop errors
1 msg	what means error msg in auth.log (failed to map...
5 msg	problem upgrading from 2.4.5 to 2.5.1
5 msg	failover
13 msg	smtp_fallback_relay

Subject:	Re: Open Relay issue
Group:	Postfix-users
From:	mouss
Date:	31 Mar 2008

Carlos Jimenez Barranco wrote:
> [snip]
> About the disabled address validation, how does Postfix check it? Is it
> related to relay_recipient_maps?
>

- set local_recipient_maps back to its default value (just remove it
from your main.cf).
- decide which domains o under mydestination and which ones go under
relay_domains. don't mix domain classes. See the AddRESS CLASS README.
- set relay_recipient_maps using ldap. when you do so, postfix will
validate relay recipients using this.

> We wanted to configure it (relay_recipient_maps) with ldap or just
> through a script to obtain a local copy of all e-mail accounts, but it
> was not accepted by the customer.
>
> As you say, we are using too much BlackLists, but it is just during a
> few days, to evaluate the best ones. We cannot use RBL's due to a load
> balancer that changes client information (hostname, sender IP)

ahuh? I hope it's not listed in mynetworks:

mynetworks = 127.0.0.1, 172.16.0.56, 172.16.0.57, 172.16.0.60,
192.168.120.0/24, 172.16.1.111

If it's in mynetworks, remove it. otherwise, you'll be an open relay.

better yet, get rid of the balancer. it creates more problems than it
solves.

> and
> doesn't permit us to filter based on IP. Then, we tried using RHSBL's
> (reject_rhsbl_sender). We are working on it.
>
>
> Ok, we are going to work on all this information.
>
>
> Thank you very much.
>
> Carlos.
>
>
> ___________________________________________________________________________
>
> Este mensaje se dirije exclusivamente a su destinatario y puede contener
> información privilegiada o confidencial de Impala Network Solutions S.L.
> Si no es vd. el destinatario indicado, queda notificado de que la utilización,
> divulgación y/o copia sin autorización está prohibida en virtud de la legislación vigente.
> Si ha recibido este mensaje por error, le rogamos nos lo comunique
> inmediatamente por esta misma via y proceda a su destrucción.
>
>
> This message is intended exclusively for its addressee and may contain
> information that is CONFIDENTIAL and protected by professional privilege.
> If you are not the intended recipient you are hereby notified that any
> dissemination, copy or disclosure of this communication is strictly
> prohibited by law. If this message has been received in error, please
> immediately notify us via e-mail and delete it.
> ___________________________________________________________________________
>
>