Hello, I would like to secure more my postfix.
My SMTP configuration actually is: _smtpd_tls_cert_file=/path/to/certs/fullchain.pem_ _smtpd_tls_key_file=/path/to/certs/privkey.pem_ _smtpd_tls_CAfile=/path/to/certs/chain.pem_ _smtpd_use_tls=yes_ _smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache_ _smtpd_tls_security_level = may_ _smtp_tls_cert_file=/path/to/certs/fullchain.pem_ _smtp_tls_key_file=/path/to/certs/privkey.pem_ _smtp_tls_CAfile=/path/to/certs/chain.pem_ _smtp_use_tls=yes_ _smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache_ _smtpd_sasl_type = dovecot_ _smtpd_sasl_path = private/auth_ _smtp_sasl_auth_enable = yes_ _smtp_sasl_security_options = noanonymous_ _smtp_sasl_password_maps = hash:/etc/postfix/sasl/sasl_passwd_ _smtpd_client_restrictions =_ _ permit_mynetworks,_ _ reject_unknown_client_hostname,_ _ permit_ _smtpd_sender_restrictions =_ _ permit_mynetworks,_ _ permit_sasl_authenticated,_ _ reject_non_fqdn_sender,_ _ reject_unknown_sender_domain,_ _ permit_ _smtpd_relay_restrictions =_ _ permit_mynetworks,_ _ permit_sasl_authenticated,_ _ defer_unauth_destination_ _smtpd_recipient_restrictions =_ _ permit_sasl_authenticated,_ _ permit_mynetworks,_ _ reject_unauth_destination,_ _ reject_rbl_client b.barracudacentral.org,_ _ reject_rbl_client zen.spamhaus.org_ _smtpd_helo_restrictions =_ _ permit_mynetworks,_ _ permit_sasl_authenticated,_ _ check_sender_access hash:/etc/postfix/rejected-recipient,_ _ check_client_access hash:/etc/postfix/client_check_access_ _ reject_unknown_helo_hostname,_ _ reject_non_fqdn_helo_hostname,_ _ reject_invalid_helo_hostname,_ _ permit_ _smtpd_helo_required = yes_ _smtpd_delay_reject = yes_ But with this configuration I can't send an email from my smartphone (reject). -- ################## Philippe - Forums