On 11.05.21 10:55, Bryan K. Walton wrote:
I apologize. I messed up the subject line on my first email.
no problem dude.
On Tue, May 11, 2021 at 10:52:07AM -0500, Bryan K. Walton wrote:
We have two Postfix servers. Currently, none of them allow relaying.
We accept incoming email only from authenticated users
I assume that you accept mail from authenticated users and pass it further.
this is called relaying :-)
client must be authenticated, in your case you require smtp authentication
(other possibility is IP-based authenticatio), otherwise your mailserver was
open relay (no-no).
and from
mail servers sending mail to any domain where we are the final
destination.
common for mail servers.
We are considering setting up an SMTP smart host server for a few
entities that would be allowed to relay through our server. My
question is:
What do you mean smart host? Do you want to send your mail through another host
(your smarthost)?
Do you want to allow for some IP addresses without SMTP authentiction?
I recommend you not to do that, unless you maintain those IPs.
Is there any security benefits to creating this smart host as a separate
SMTP server? Are there any "best practices" for this kind of situation?
If you accept mail from anyone and pass it further, using different server
may be good in case they cause spam outbreak - it will be another server
that's flooded off, slow to accept and process mail, getting to blacklists.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
REALITY.SYS corrupted. Press any key to reboot Universe.
