On 2011-10-25 18:49, Aniruddha wrote:
I've added my local ip adress range to allow computers in my lan to send e-mails though my local postfix server. Is this the correct setting to achieve this?
That depends. Do you trust all hosts in the local LAN ?
And am I correct that with the current mynetworks configuration only clients in my lan can user the smtp server?
How mynetworks restricts or allows access depends on many other settings, most significantly the contents of smtpd_[client|helo|sender|recipient]_restrictions
According to mxtoolbox I don't have an open relay. Are there other security measures I should take?
Probably many, but not related to mynetworks.
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.1.0/24
A good (and common) practice is to either deny all remote hosts the ability to send mail directly (valid users can use submission), or to only allow the local networks or - even better - specific hosts to send mail freely.
-- J.
