Re: Accept mail for postmaseter, abuse while denying else
- Andrew Long wrote:
>> -----Original Message-----if you send me mail claiming to be from foo@..., but I find
>> From: owner-postfix-users@...
>> [mailto:owner-postfix-users@...] On Behalf Of mouss
>> Sent: Thursday, November 01, 2007 8:02 AM
>> Cc: postfix-users@...
>> Subject: Re: Accept mail for postmaseter, abuse while denying else
>> Andrew Long wrote:
>>> I now have this server pretty much denying everything
>> except relay for a (relay-ip) list of sites. My problem is that the
>> server is apparently rejecting mail for <postmaster@...>
>> and likely for <abuse@> also.
>> How can I accept mail for these local users while denying all else?
>>> # 2007-11-01 - postconf -n
>>> alias_maps = hash:/etc/aliases
>>> command_directory = /usr/sbin
>>> config_directory = /etc/postfix
>>> daemon_directory = /usr/libexec/postfix debug_peer_level = 2
>>> html_directory = no local_recipient_maps = mailq_path =
>>> /usr/bin/mailq.postfix manpage_directory = /usr/share/man
>>> mydestination = localhost.localdomain, host.domain.com mynetworks =
>>> 127.0.0.0/8, /etc/postfix/relay-ip newaliases_path =
>>> /usr/bin/newaliases.postfix readme_directory =
>>> relay_domains =
>>> sample_directory = /usr/share/doc/postfix-2.2.10/samples
>>> sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop
>>> smtpd_banner = $myhostname ESMTP $mail_name
>>> reject_rbl_client bl.spamcop.net,
>>> smtpd_helo_required = yes
>>> smtpd_recipient_restrictions =
>> here add:
>> check_recipient_access hash:/etc/postfix/roleaccount
>> # cat roleaccount
>> postmaster@... OK
>> abuse@... OK
>> # postmap roleaccount
>> the reject_unauth_destination is a safety measure, keep it to avoid
>> accidentally becoming an open relay.
>> so this server does not accept mail from the public. it should thus
>> not be listed as an MX in DNS.
> I did not think of that...
> We had problems before we added a PTR with mail being denied for certain destinations. Will removing the MX but leaving the PTR work?
out that I cannot send mail to foo@..., then I will block
you, whether you setup an MX or not.
if on the other hand you never send mail from *@..., then
you don't need to receive mail to such addresses, and as a result you
don't need an MX.