Hi Andrew,

I understand that I should only removed permit_sasl_authenticated entries
rather than commenting all entries but I am still figuring out how users
can get authenticated with a mail gw where actually they are configured on
different mail server. Would you please share any online documentation or
diagram which can help me to understand the scenario.
--------------------------------------------------------------------------
Thanks and Regards,
Manish R


On Fri, Dec 28, 2012 at 1:38 PM, Andrew Colin Kissa <[email protected]>wrote:

>
> On 28 Dec 2012, at 9:47 AM, Manish Rane wrote:
>
> > OK - I somehow managed to resolve the issue by commenting below lines.
> >
> > #smtpd_client_restrictions = permit_sasl_authenticated
> > #smtpd_sender_restrictions = permit_sasl_authenticated,
> check_sender_access hash:/etc/postfix/sender_access,
> reject_non_fqdn_sender, reject_unknown_sender_domain
> > #smtpd_helo_restrictions = permit_sasl_authenticated check_helo_access
> hash:/etc/postfix/helo_access, reject_invalid_hostname
> > #smtpd_recipient_restrictions = permit_sasl_authenticated,
> reject_unknown_recipient_domain, reject_unauth_destination,
> whitelist_policy, rbl_policy, spf_policy
> > #smtpd_data_restrictions = permit_sasl_authenticated,
> reject_unauth_pipelining
>
> You have NOT resolved the issue, you have actually broken your postfix
> configuration by
> commenting out those lines, your mail server could be an open relay now
> since you have
> no restrictions.
>
> I suggest you read up[1] on those options before you begin changing them
> or get someone
> who knows what they are doing to setup the solution for you.
>
> [1] http://www.postfix.org/postconf.5.html
>
> --
> www.baruwa.org
>
>
>
>
> _______________________________________________
> Keep Baruwa FREE - http://pledgie.com/campaigns/12056
>
_______________________________________________
Keep Baruwa FREE - http://pledgie.com/campaigns/12056

Reply via email to