Right way to set smtpd_relay_restrictions

About Zarafa appliance or Zarafa managed by Artica

Right way to set smtpd_relay_restrictions

New postby goofy180173 » Sun Aug 25, 2013 8:40 pm

I wasn' t able to send to my relayhost with tls
So I changed the settings in the main config. But what's the right way to do this in the administration GUI

changed
smtpd_recipient_restrictions
to
smtpd_relay_restrictions

and added
smtp_use_tls=yes

now all works
goofy180173
 
Posts: 96
Joined: Mon Jan 02, 2012 11:02 am
Artica servers number: 1
Linux System: Debian
Technical skills: A Linux developper

Re: Right way to set smtpd_relay_restrictions

New postby goofy180173 » Tue Aug 27, 2013 6:21 am

I also noticed, that the order of the restrictions generated from the Administration GUI is not the best way.
This are the restrictions I´m using now and hopefully a correct order.
Maybe there should also be a guide how to configure a secure mailserver
Code: Select all
    # Restrictions
    smtpd_relay_restrictions =
    # Postmaster, abuse and other role accounts
       check_recipient_access hash:/etc/postfix/access_recipient-rfc,
    # White- und Blacklisting
       check_client_access hash:/etc/postfix/access_client,
       #check_helo_access = btree:/etc/postfix/access_helo,
       #check_sender_access = btree:/etc/postfix/access_sender,
       #check_recipient_access = btree:/etc/postfix/access_recipient,
    # accept no dirty mails
       reject_non_fqdn_sender,
       reject_non_fqdn_recipient,
       reject_unknown_sender_domain,
       reject_unknown_recipient_domain,
    # only our users
       permit_sasl_authenticated,
       permit_mynetworks,
    # RBL (Realtime Blackhole List)
       reject_rbl_client zen.spamhaus.org,
       reject_rbl_client ix.dnsbl.manitu.net,
       reject_rbl_client bl.spamcop.net,
       reject_rbl_client dnsbl.njabl.org,
       reject_rbl_client list.dsbl.org,
       reject_rhsbl_client blackhole.securitysage.com,
    # Postgrey
       check_policy_service inet:127.0.0.1:10023,
    # Greylisting
       reject_unverified_recipient,
    #Backup MX
    #   permit_mx_backup,
    # forbid all
       reject_unauth_destination,
    #If you are here you should be able to send
       permit
L[code][/code]
goofy180173
 
Posts: 96
Joined: Mon Jan 02, 2012 11:02 am
Artica servers number: 1
Linux System: Debian
Technical skills: A Linux developper

Re: Right way to set smtpd_relay_restrictions

New postby gregkawk » Thu Sep 05, 2013 2:50 pm

des informations utiles ; )
gregkawk
 
Posts: 1
Joined: Thu Sep 05, 2013 1:56 pm
Artica servers number: 2
Linux System: Microsoft systems
Technical skills: Microsoft Windows skills


Return to Zarafa mail server

Who is online

Users browsing this forum: No registered users and 2 guests

cron