Hi, I have configured postfix postfix-2.4.5-2.fc8. all mail user are getting forged mails as sender and recipient are same. we have secondary mx i am sending both postconf output,
Please help me to stop forged mail. Postconf -n of primary MTA alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix content_filter = smtp:192.168.1.250:25 daemon_directory = /usr/libexec/postfix debug_peer_level = 2 default_process_limit = 3 header_checks = pcre:/etc/postfix/header_checks inet_interfaces = all mail_owner = postfix mailbox_size_limit = 102400000 mailq_path = /usr/bin/mailq manpage_directory = /usr/local/man message_size_limit = 15360000 mydestination = $myhostname, localhost.$mydomain, $mydomain, mail.mydomain.com mydomain = mydoamin.com myhostname = mail.mydomain.com mynetworks = 127.0.0.0/8, 10.2.1.0/24 myorigin = $mydomain newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = no sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtp_tls_note_starttls_offer = yes smtp_use_tls = yes smtpd_banner = ESMTP smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated smtpd_error_sleep_time = 60 smtpd_hard_error_limit = 10 smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_pipelining, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_unauth_destination smtpd_restriction_classes = restriction smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = smtpd_sasl_security_options = noanonymous smtpd_sender_restrictions = permit_mynetworks,reject_rhsbl_sender dsn.rfc-ignorant.org,permit_sasl_authenticated,permit_sasl_authenticated, smtpd_soft_error_limit = 60 smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem smtpd_tls_key_file = /etc/postfix/ssl/mail.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes strict_rfc821_envelopes = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 450 Postconf -n of secondary MTA alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = mail2.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.2.8/README_FILES relay_domains = $mydestination, mydomain.com relay_recipient_maps = hash:/etc/postfix/access sample_directory = /usr/share/doc/postfix-2.2.8/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, permit_mx_backup smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_sender_access hash:/etc/postfix/accesss, reject_non_fqdn_sender transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 Suggestions highly appreciated. Regards, Ramesh.