Peter Fraser: > Hi All > We had an auditor to an internal pentest for our network. The > result for our Postfix box was (My Words) Although your SMTP server > prevents relay in some circumstances, it still allows email from > an empty domain. I am aware that the empty domain <> is needed for > bounce messages. Is there a way to prevent an initial email out > form an empty domain but still allow Postfix to use it internally > for bounce messages?
Postfix does not give 'relay permission' based on the ENVELOPE SENDER address. Instead, Postfix gives relay permission based in the SMTP client IP address. Wietse