08.01.2018 22:01, Greg Freemyer пишет:
On Mon, Jan 8, 2018 at 1:21 PM, Andrei Borzenkov <arvidjaar@gmail.com> wrote:
08.01.2018 20:06, Greg Freemyer пишет: ...
smtpd_client_restrictions = smtpd_helo_restrictions = smtpd_sender_restrictions = hash:/etc/postfix/access smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
Normally this should prevent delivery to destinations for which this postfix instance is not final.
My "access" file was effectively empty (comments only).
I referred to smtpd_recipient_restrictions
I have just added:
admin@intelligentavatar.net DISCARD
which I hope will silently discard email relay attempts for that from address.
Maybe I should use REJECT instead?
Are you sure these have not been tampered with?
virtual_mailbox_domains = intelligentavatar.net iac-forensics.com virtual_mailbox_base = /srv/maildirs virtual_mailbox_maps = hash:/etc/postfix/vmailbox
Or this?
I don't know if something was tampered with, but a month ago email relaying for admin@intelligentavatar.net was rejected and this weekend it was allowed.
Postfix primary check is for network range, not MAIL FROM (which can obviously be forged quite easily). What IP this client connects from? Is it local subnet? May be something in your hosting provider network topology changed?
That is a legit alias on my server so I don't know why it was rejected in the past, and I don't know why relay started working at some point in the last month.
Greg
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org