Hi,

I would like to completely cut off all mail leaving my servers that have not 
originated from a FreeBSD jail running postfix (plus rspamd).

These are my measures taken sofar:

#) Using FreeBSD's pf firewall functionality to block all traffic leaving my 
   servers via ports 25, 465, and 587, respectively, that has not originated 
   in a FreeBSD jail running postfix

#) Disallow relaying except for SALS authenticated users:
        smtpd_relay_restrictions =
                permit_sasl_authenticated
                reject_unauth_destination

#) Deny local mail submission to all users:
        authorized_submit_users =


All my test are showing that my goal has been achieved, *but* I may have 
overseen something I should prevent, as well. Have I?

Any feedback is highly appreciated.

Thanks and regards,
Michael

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to