Hello,
I would like to secure more my postfix.
My SMTP configuration actually is:
_smtpd_tls_cert_file=/path/to/certs/fullchain.pem_
_smtpd_tls_key_file=/path/to/certs/privkey.pem_
_smtpd_tls_CAfile=/path/to/certs/chain.pem_
_smtpd_use_tls=yes_
_smtpd_tls_session_cache_database =
btree:${data_directory}/smtpd_scache_
_smtpd_tls_security_level = may_
_smtp_tls_cert_file=/path/to/certs/fullchain.pem_
_smtp_tls_key_file=/path/to/certs/privkey.pem_
_smtp_tls_CAfile=/path/to/certs/chain.pem_
_smtp_use_tls=yes_
_smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache_
_smtpd_sasl_type = dovecot_
_smtpd_sasl_path = private/auth_
_smtp_sasl_auth_enable = yes_
_smtp_sasl_security_options = noanonymous_
_smtp_sasl_password_maps = hash:/etc/postfix/sasl/sasl_passwd_
_smtpd_client_restrictions =_
_ permit_mynetworks,_
_ reject_unknown_client_hostname,_
_ permit_
_smtpd_sender_restrictions =_
_ permit_mynetworks,_
_ permit_sasl_authenticated,_
_ reject_non_fqdn_sender,_
_ reject_unknown_sender_domain,_
_ permit_
_smtpd_relay_restrictions =_
_ permit_mynetworks,_
_ permit_sasl_authenticated,_
_ defer_unauth_destination_
_smtpd_recipient_restrictions =_
_ permit_sasl_authenticated,_
_ permit_mynetworks,_
_ reject_unauth_destination,_
_ reject_rbl_client b.barracudacentral.org,_
_ reject_rbl_client zen.spamhaus.org_
_smtpd_helo_restrictions =_
_ permit_mynetworks,_
_ permit_sasl_authenticated,_
_ check_sender_access hash:/etc/postfix/rejected-recipient,_
_ check_client_access hash:/etc/postfix/client_check_access_
_ reject_unknown_helo_hostname,_
_ reject_non_fqdn_helo_hostname,_
_ reject_invalid_helo_hostname,_
_ permit_
_smtpd_helo_required = yes_
_smtpd_delay_reject = yes_
But with this configuration I can't send an email from my smartphone
(reject).
--
##################
Philippe - Forums
