On Jan 25, 2007, at 11:39 AM, Jason Deraleau wrote:
On Jan 25, 2007, at 11:11 AM, Paul Chernoff wrote:
Now that I have a Mac OS X Server mail server running, I would
like to do some additional settings to match settings that I have
created in EIMS. I haven't found this information in Apple's
manuals, but I would be happy for references to where to find this
information in Postfix or Cyrus documentation.
For the record, you're asking for fairly advanced Postfix
configuration information (this has nothing to do with Cyrus). You
might have better luck finding answers to these types of questions
on a Postfix-specific mailing list or on the postfix.org web site.
1) I want to restrict the mail servers that this server will
accept e-mail from. We use Postini to filter our e-mail and I want
to ensure that senders are not bypassing Postini by sending mail
directly to my mail servers IP address. In EIMS I have define what
IP addresses and ranges that can access our SMTP service (this is
not the Relay Security setting).
I believe you can accomplish this with the
smtpd_sender_restrictions parameter in /etc/postfix/main.cf. You
should be able to use a hash file containing the IPs/networks from
which you want to allow connections. Though you might find this
easier to accomplish at an TCP/IP (that is, firewall) level.
2) If someone is in my LAN they can use port 25 for sending e-mail
through our server, but if they are not on our LAN they should use
port 587. This is done partly to get around various ISPs who block
port 25.
You can modify /etc/postfix/master.cf and enable the entries for
the submission port. That will enable 587.
Remember that you must reload Postfix after making any changes. You
can do that using "sudo postfix reload" or through the Server Admin
tool.
Thanks. I suspect that they were Postfix questions. I have been
looking at the documentation on their site since I posted my question.
1) Yes, I might just use my firewall for this purpose. Good idea (it
was easy to implement this restriction in EIMS).
2) Thanks.
============================
Paul Chernoff
Director of Information Technology
Washingtonian Magazine
