Hi,

I have configured postfix postfix-2.4.5-2.fc8. all mail user are
getting forged mails as sender and recipient are same. we have
secondary mx i am sending both postconf output,

Please help me to stop forged mail.

Postconf -n of primary MTA

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp:192.168.1.250:25
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_process_limit = 3
header_checks = pcre:/etc/postfix/header_checks
inet_interfaces = all
mail_owner = postfix
mailbox_size_limit = 102400000
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 15360000
mydestination = $myhostname, localhost.$mydomain, $mydomain,
mail.mydomain.com
mydomain = mydoamin.com
myhostname = mail.mydomain.com
mynetworks = 127.0.0.0/8, 10.2.1.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = ESMTP
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated
smtpd_error_sleep_time = 60
smtpd_hard_error_limit = 10
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject_unauth_pipelining,
reject_unknown_recipient_domain, reject_non_fqdn_sender,
reject_unauth_destination
smtpd_restriction_classes = restriction
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_mynetworks,reject_rhsbl_sender
dsn.rfc-ignorant.org,permit_sasl_authenticated,permit_sasl_authenticated,
smtpd_soft_error_limit = 60
smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem
smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem
smtpd_tls_key_file = /etc/postfix/ssl/mail.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 450


Postconf -n of secondary MTA

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost
myhostname = mail2.mydomain.com
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.2.8/README_FILES
relay_domains = $mydestination, mydomain.com
relay_recipient_maps = hash:/etc/postfix/access
sample_directory = /usr/share/doc/postfix-2.2.8/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject_unauth_destination, permit_mx_backup
smtpd_sender_restrictions = permit_sasl_authenticated,
permit_mynetworks, check_sender_access hash:/etc/postfix/accesss,
reject_non_fqdn_sender
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550


Suggestions highly appreciated.

Regards,
Ramesh.

Reply via email to