sender check

2009-11-26 Thread Marco Giardini
I have a barracuda server that receives mails, filter them  and forward to a
linux system running postfix.

Both machine have a public IP (static).

The linux system is configured to be used as SMTP for sasl authenticated
users as well, besides to be used as SMTP for the people on $mynetworks
(permit_mynetworks in the smtpd_recipient_restrictions).

Unfortunatley, some spammers, have found it and use to spam local recipients
using the linux machine, avoiding so to be filtered through the barracuda
system.

I'm wondering if there is a way to allow OLNY local users or users belonging
to the domains hosted by the linux server to use SMTP.

Thanks

 

MG

 



Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini:
 I have a barracuda server that receives mails, filter them  and forward to a
 linux system running postfix.
 
 Both machine have a public IP (static).
 
 The linux system is configured to be used as SMTP for sasl authenticated
 users as well, besides to be used as SMTP for the people on $mynetworks
 (permit_mynetworks in the smtpd_recipient_restrictions).
 
 Unfortunatley, some spammers, have found it and use to spam local recipients
 using the linux machine, avoiding so to be filtered through the barracuda
 system.
 
 I'm wondering if there is a way to allow OLNY local users or users belonging
 to the domains hosted by the linux server to use SMTP.

To permit only local systems (incl. barracuda box), or users that
have a relationship with your server:

smtpd_recipient_restrictions = 
permit_mynetworks permit_sasl_authenticated reject

Wietse


Re: sender check

2009-11-26 Thread Marco Giardini
* Wietse Venema wie...@porcupine.org [2009-11-26 12:20:19 -0500]:

 Marco Giardini:
  I have a barracuda server that receives mails, filter them  and forward to a
  linux system running postfix.
  
  Both machine have a public IP (static).
  
  The linux system is configured to be used as SMTP for sasl authenticated
  users as well, besides to be used as SMTP for the people on $mynetworks
  (permit_mynetworks in the smtpd_recipient_restrictions).
  
  Unfortunatley, some spammers, have found it and use to spam local recipients
  using the linux machine, avoiding so to be filtered through the barracuda
  system.
  
  I'm wondering if there is a way to allow OLNY local users or users belonging
  to the domains hosted by the linux server to use SMTP.
 
 To permit only local systems (incl. barracuda box), or users that
 have a relationship with your server:
 
 smtpd_recipient_restrictions = 
 permit_mynetworks permit_sasl_authenticated reject
 
   Wietse

i do use:
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination

but it seems from the log that spammer still send me and to other
local users spam mails.
Humm...strange

mg





Re: sender check

2009-11-26 Thread John Peach
On Thu, 26 Nov 2009 18:29:00 +0100
Marco Giardini m...@tecnogi.com wrote:

 * Wietse Venema wie...@porcupine.org [2009-11-26 12:20:19 -0500]:
 
  Marco Giardini:
   I have a barracuda server that receives mails, filter them  and forward 
   to a
   linux system running postfix.
   
   Both machine have a public IP (static).
   
   The linux system is configured to be used as SMTP for sasl authenticated
   users as well, besides to be used as SMTP for the people on $mynetworks
   (permit_mynetworks in the smtpd_recipient_restrictions).
   
   Unfortunatley, some spammers, have found it and use to spam local 
   recipients
   using the linux machine, avoiding so to be filtered through the barracuda
   system.
   
   I'm wondering if there is a way to allow OLNY local users or users 
   belonging
   to the domains hosted by the linux server to use SMTP.
  
  To permit only local systems (incl. barracuda box), or users that
  have a relationship with your server:
  
  smtpd_recipient_restrictions = 
  permit_mynetworks permit_sasl_authenticated reject
  
  Wietse
 
 i do use:
 smtpd_recipient_restrictions =
 permit_mynetworks
 permit_sasl_authenticated
 reject_unauth_destination
 
 but it seems from the log that spammer still send me and to other
 local users spam mails.
 Humm...strange

Not at all; try reading what Wietse wrote.

reject, NOT reject_unauth_destination.

 
 mg
 
 
 


-- 
John


Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini:
 * Wietse Venema wie...@porcupine.org [2009-11-26 12:20:19 -0500]:
 
  Marco Giardini:
   I have a barracuda server that receives mails, filter them  and forward 
   to a
   linux system running postfix.
   
   Both machine have a public IP (static).
   
   The linux system is configured to be used as SMTP for sasl authenticated
   users as well, besides to be used as SMTP for the people on $mynetworks
   (permit_mynetworks in the smtpd_recipient_restrictions).
   
   Unfortunatley, some spammers, have found it and use to spam local 
   recipients
   using the linux machine, avoiding so to be filtered through the barracuda
   system.
   
   I'm wondering if there is a way to allow OLNY local users or users 
   belonging
   to the domains hosted by the linux server to use SMTP.
  
  To permit only local systems (incl. barracuda box), or users that
  have a relationship with your server:
  
  smtpd_recipient_restrictions = 
  permit_mynetworks permit_sasl_authenticated reject
  
  Wietse
 
 i do use:
 smtpd_recipient_restrictions =
 permit_mynetworks
 permit_sasl_authenticated
 reject_unauth_destination

I wrote:

vv
permit_mynetworks permit_sasl_authenticated reject
^^
Wietse


Re: sender check

2009-11-26 Thread Ralf Hildebrandt
* Marco Giardini m...@tecnogi.com:

  smtpd_recipient_restrictions = 
  permit_mynetworks permit_sasl_authenticated reject
  
  Wietse
 
 i do use:
 smtpd_recipient_restrictions =
 permit_mynetworks
 permit_sasl_authenticated
 reject_unauth_destination
 
 but it seems from the log that spammer still send me and to other
 local users spam mails.
 Humm...strange

Not strange. Look at the difference in the two configs.
The solution is right there.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de