--On Thursday, January 17, 2013 4:12 PM -0600 Noel Jones
<njo...@megan.vbhcs.org> wrote:
On 1/17/2013 3:56 PM, Quanah Gibson-Mount wrote:
--On Wednesday, January 09, 2013 10:53 AM -0800 Quanah Gibson-Mount
<qua...@zimbra.com> wrote:
Submission and "smtps" perform essentially the same function, and
should get identical settings, with the obvious addition of tls
wrappermode for smtps.
Perfect, thank you very much!
Ok, I've modified my master.cf for the smtpd daemons to the
following. Does it appear in general, more sane?
smtp inet n - n - - smtpd
-o content_filter=scan:[127.0.0.1]:10029
465 inet n - n - - smtpd
-o content_filter=scan:[127.0.0.1]:10029
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=
-o smtpd_data_restrictions=
-o smtpd_end_of_data_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=
Hi Noel,
I don't think postfix will start (or at least won't start this
service) with both smtpd_recipient_restricions and
smtpd_relay_restrictions set empty.
Yeah, I just ran into that in testing the changes in more detail.
For submission/smtps, one of these needs to be set eg.
smtpd_relay_restrictions=permit_sasl_authenticated,reject
Thanks, done, and it looks much better. ;)
It's also customary to set
-o milter_macro_daemon_name=ORIGINATING
in case a milter gets put in the loop,
Ok, that is quite helpful to know.
and I find it very useful to set the syslog name
-o syslog_name=postfix/smtps
(similar for postfix/submission).
That's really helpful, thank you. :)
--Quanah
--
Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration