Dave a écrit : > On Mon, Jan 26, 2009 at 12:58 PM, Bjørn Ruberg <bj...@ruberg.no > <mailto:bj...@ruberg.no>> wrote: > > [snip] > > An even easier alternative is to let Postfix listen to localhost > only, by adding "127.0.0.1 <http://127.0.0.1>:" in front of the > "smtp" configuration setting in master.cf <http://master.cf>, so > that it says something like this: > > 127.0.0.1:smtp inet n - - - - smtpd > > That way it will not be directly reachable from the outside. > > -- > Bjørn > > > OK, I did this too. (In addition to setting inet_interfaces = 127.0.0.1 > in main.cf <http://main.cf>.)
This may cause problems because the IP will also be used for smtp_bind_address, which means smtp will use it as the source IP when talking to other mail servers. better not play with inet_interfaces and edit master.cf instead. > > I'll do the firewall too if I can easily do it via webmin. > There must be howtos/guides/docs/... out there. but you'll have to take the time to learn about firewalling (this is worth the pain anyway).
