Marcel Grandemange wrote:
> I tried according to docs set bind address to 127.0.0.1 and the virtual ip,
> It still sends mail out main interface.
>   
Please do not top post. (google/wikipedia has more)

FIRST, do what mouss suggests and block the spammer through whatever
means they are using (broken script, bad settings, etc).

Is this a virtual machine?  Is this IP(or machine) NAT'd to the main IP?
If both questions are yes, then you have a network issue not a Postfix one.

NAT routing will change the IP no matter how you setup Postfix.

It's how you appear to the outside world, not what you use internally.

'wget http://checkip.dyndns.org' on the "virtual" IP to find out what
the world sees you as.

In addition, Postfix does not choose interfaces, your network routing
table does.

If it's not what you want, fix it. (This is beyond the topic of this list.)

Brian

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of mouss
> Sent: Tuesday, September 02, 2008 8:16 PM
> Cc: postfix-users@postfix.org
> Subject: Re: FW: Virtual Interface
>
> Marcel Grandemange wrote:
>   
>>  
>>
>> I have a server that has one real ip and a virtual second ip.
>>
>> Both are connected to the same isp but have different addresses.
>>
>>  
>>
>> The plan was one is used for all normall traffic but the second only for
>> mail.
>>
>>  
>>
>> This is not working so,
>>     
>
>
> smtp_bind_address = 196.211.117.44
>
> http://www.postfix.org/postconf.5.html#smtp_bind_address
>
>   
>> when a user sends mail postfix uses the main ip
>> address to send from, this creates an issue as there is someone on the
>> internal network running there own smtp server and sending spam.
>>     
>
> so you host a miscreant and all you found is to evade? block or die.
>
>   
>> This results in the main address being blacklisted and our mail server as
>> well.
>>
>>  
>>
>> If postfix could simply send mail from the virtual address our issues
>>     
> would
>   
>> be solved as main interface can be blacklisted and wont effect our mail
>> server.
>>     
>
> and this will help how? the spammer will still continue his operation. 
> and if nothing is done, and at some time, your whole network will be 
> blocked, and your name (domain, company, ...) will be associated with spam.
>
>
> __________ NOD32 3407 (20080902) Information __________
>
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
>
>
>   

Reply via email to