Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
postfix [2006/03/08 09:05] greebo |
postfix [2012/07/31 12:45] (current) greebo old revision restored |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Postfix ====== | ====== Postfix ====== | ||
+ | |||
+ | |||
==== Useful links ==== | ==== Useful links ==== | ||
* [[http:// | * [[http:// | ||
+ | * [[http:// | ||
+ | * [[http:// | ||
+ | * [[http:// | ||
+ | * [[http:// | ||
+ | * [[http:// | ||
+ | |||
===== TODO ===== | ===== TODO ===== | ||
* **berljivost clanka** | * **berljivost clanka** | ||
+ | * **RAZLICNI SCENARIJI** | ||
* vrstni red | * vrstni red | ||
* razlicni scenariji | * razlicni scenariji | ||
Line 19: | Line 28: | ||
unverified_recipient_reject_code = 550 | unverified_recipient_reject_code = 550 | ||
unverified_sender_reject_code = 550 | unverified_sender_reject_code = 550 | ||
+ | |||
+ | |||
+ | |||
+ | smtpd_discard_ehlo_keywords = silent-discard, | ||
+ | |||
+ | ===== Different Setups ===== | ||
+ | * [[postfix: | ||
+ | * [[postfix: | ||
+ | * [[postfix: | ||
+ | * [[postfix: | ||
+ | * [[postfix: | ||
===== Cool :) postifx hacks ===== | ===== Cool :) postifx hacks ===== | ||
here are some tips .. | here are some tips .. | ||
+ | |||
+ | ==== Making postfix only send through 'smart relayhost' | ||
+ | |||
+ | I use this construction to have a fallback option when the direct connected ADSL-line is down: replace ' | ||
==== Hide internal/ | ==== Hide internal/ | ||
Line 44: | Line 68: | ||
/ | / | ||
/./ IGNORE | /./ IGNORE | ||
+ | |||
Line 50: | Line 75: | ||
'' | '' | ||
+ | 2008-02-06 (b) Not necessarily. If you use reject_unverified_recipient, | ||
+ | ---------------- | ||
- | ---------------- | ||
===== Unsorted stuff ===== | ===== Unsorted stuff ===== | ||
Line 80: | Line 106: | ||
Limit the number of times a client can issue a junk command such as NOOP, VRFY, ETRN or RSET in one SMTP session before it is penalized with tarpit delays. | Limit the number of times a client can issue a junk command such as NOOP, VRFY, ETRN or RSET in one SMTP session before it is penalized with tarpit delays. | ||
=== | === | ||
+ | tired of " | ||
+ | |||
+ | add to / | ||
+ | |||
+ | mechlist: plain login crammd5 digestmd5 | ||
+ | |||
+ | or try this: | ||
+ | cd / | ||
+ | mkdir deactivated | ||
+ | mv *otp* deactivated | ||
+ | # for good measure | ||
+ | mv *ntlm* deactivated | ||
+ | |||
============= | ============= | ||
Line 123: | Line 162: | ||
out that many clients won't accept a REJECT after the (HELO|MAIL | out that many clients won't accept a REJECT after the (HELO|MAIL | ||
FROM: | FROM: | ||
+ | |||
+ | ===== ABKO ==== | ||
+ | |||
+ | check_*_mx_access cidr:/ | ||
+ | |||
+ | 0.0.0.0/ | ||
+ | 10.0.0.0/ | ||
+ | 127.0.0.0/ | ||
+ | 169.254.0.0/ | ||
+ | 172.16.0.0/ | ||
+ | 192.0.2.0/ | ||
+ | 192.168.0/ | ||
+ | 224.0.0.0/ | ||
+ | 240.0.0.0/ | ||
+ | 248.0.0.0/ | ||
+ | |||
+ | source - IPv4 bogon list - http:// | ||
========== | ========== | ||
Line 217: | Line 273: | ||
smtpd_recipient_restrictions = | smtpd_recipient_restrictions = | ||
- | reject_unauth_pipelining, | + | # reject_unauth_pipelining, |
reject_non_fqdn_sender, | reject_non_fqdn_sender, | ||
reject_non_fqdn_recipient, | reject_non_fqdn_recipient, | ||
Line 228: | Line 284: | ||
reject_rbl_client dnsbl.sorbs.net | reject_rbl_client dnsbl.sorbs.net | ||
reject_unauth_destination | reject_unauth_destination | ||
+ | |||
+ | smtpd_data_restrictions = | ||
+ | reject_unauth_pipelining | ||
# | # | ||
Line 282: | Line 341: | ||
dsl.net | dsl.net | ||
+ | |||
+ | |||
+ | **B wrote** | ||
+ | To matchne vsak hostname, v katerem se pojavi " | ||
+ | |||
+ | ali ce hoces bit natancen: | ||
+ | / | ||
+ | |||
/ | / |