Peter Fraser:
> Hi All
> We had an auditor to an internal pentest for our network. The
> result for our Postfix box was (My Words) Although your SMTP server
> prevents relay in some circumstances, it still allows email from
> an empty domain. I am aware that the empty domain <> is needed for
> bounce messages. Is there a way to prevent an initial email out
> form an empty domain but still allow Postfix to use it internally
> for bounce messages?
Postfix does not give 'relay permission' based on the ENVELOPE
SENDER address.
Instead, Postfix gives relay permission based in the SMTP client
IP address.
Wietse