Hi Noel

> > My main questions are:
> > 
> > (1) What are the nominal, specific Postfix instances that I need to do that 
> > ^^ that?  By any chance is there a single example that you might know of 
> > for that simple combined config?
> > (2) Should I configure all that in only one instance, or is there a good 
> > reason to use Postfix's "multi-instance" setup?

> Don't try to do this all at once, there are too many moving parts.
> Work on the gateway and home server separately; get one working,
> then work on the other.

'Full blown' home server's already working.  G'zillions of solid tutorials on 
THAT one.

Will eventually strip it down a bit.

>  Don't try to configure spam filtering on
> the gateway until after you get the basic postfix config working.
> http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient

Yep.

> For your VPS gateway, this should get you started:
> http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall
> Note that it's important for the gateway to have a list of valid
> recipients. This can either be be a list you maintain as
> relay_recipient_maps, or let postfix do it for you with
> "reject_unverified_recipient"

Okay.

I don't want to maintain that list in two locations.  It does and will exist on 
the local server.  So I was looking at the 
http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient to have 
postfix "do it for me".

Which I think is the right place.

> For your home server, start here:
> http://www.postfix.org/STANDARD_CONFIGURATION_README.html#local_network

Yep.

> You'll also want to set the VPS as relayhost, and set some controls
> so the home system accepts mail ONLY from the VPS -- easiest way to
> do that is add the VPS IP to the home system mynetworks, then add
> something like this to main.cf:
> smtpd_client_restrictions =
>   permit_mynetworks
>   reject

Okay.  I'm properly worried about OPENrelay -- this is a good hint to help lock 
it down.

> You most likely won't need multi-instance support, but that may depend on the 
> details of 

I still get a bit confused about when to modify main.cf vs master.cf for 
multi-function setup.

multi-INSTANCE seems like it simplifies THAT a bit, but adds the complexity of 
passing the mail between instances.

No idea of my my own which is better, so I'll stick with the "likely won't 
need" for now.

> your future spam filtering config.

As much as I can I'd like to KISS (but effective), use a good set of RDBLs and 
avoid amavis.  Its config just befuddles me.

Thanks!

Gornle

Reply via email to