On Tue, 20 Oct 2009, Severian37 wrote: > My postfix email server has been listed by dsnbl.njabl.org as an open relay, > but I'm not sure why. I tested the server from another site, and it passes > every test. > > My main.cf is setup with the following:
No. Paste the output of 'postconf -n'. See DEBUG_README before replying to this message.` > sample_directory = /usr/share/doc/postfix-2.2.10/samples Upgrade. > smtpd_recipient_restrictions = check_sender_access > hash:/etc/postfix/dsn_exceptions What is in this file? > check_sender_access hash:/etc/postfix/access, And this file? > njabl.org did a relay test where they send a msg on my email server from > sender postmas...@myemailserver.com, and it apparently sent back to them, > despite the fact their mail server was not my domain. > > Where is the loophole in my config? Do you really need to obfuscate your server's hostname? If so, at least follow DEBUG_README and provide some logging that corresponds with njabl.org's relay test. -- Sahil Tandon <sa...@tandon.net>