MESSAGE
| DATE | 2022-01-12 |
| FROM | Wietse Venema
|
| SUBJECT | Re: [Hangout - NYLXS] Adding Additional domains and outgoing email
|
Wietse:
> I think it is a mistake to enforce Spamhaus for clients that connect
> to port 578. Clients on port 25 must authenticate.
Ruben Safir:
> I agree, but I don't know how to control rules for 587?
> How do I tell it to do something only on port 587?
In the stock master.cf file:
#submission inet n - n - - smtpd
# -o syslog_name=postfix/submission
# -o smtpd_tls_security_level=encrypt
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_tls_auth_only=yes
# -o smtpd_reject_unlisted_recipient=no
# Instead of specifying complex smtpd__restrictions here,
# specify "smtpd__restrictions=$mua__restrictions"
# here, and specify mua__restrictions in main.cf (where
# "" is "client", "helo", "sender", "relay", or "recipient").
# -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_relay_restrictions=
# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
Once the "#" is removed, the smtpd restrictions are:
submission inet n - n - - smtpd
...
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_relay_restrictions=
-o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
...
Note that there are no DNSBL checks on the submission port.
Wietse
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
|
|
