I seem to be able to setup a desktop email client and send email to my
server, from any external network, and the email will be accepted for
delivery as long as a) the sender uses any "from address" ("local part")
@my.real-domain.com, and b) the recipient has a mailbox @my.real-domain.com.

The only means by which I was able to eliminate this behavior was to
define a directive that was introduced in versions >= 2.10:

smtpd_relay_restrictions = permit_mynetworks, reject_unauth_destination

while leaving the same restrictions in smtpd_recipient_restrictions.

I'm using a package in the Ubuntu 10.04 LTS repository and, by default,
the smtpd_relay_restrictions directive is not defined. Should it be
defined by default? Or is there some sound reason for which it should
not be defined by default?

Postfix "postfinger" output for this server (prior to closing this "hole"):

http://pastebin.com/QGE3cah5

Thanks for any insight here.

-Ben

Reply via email to