Re: Postfix Deployment

2009-11-28 Thread Wietse Venema
Stan Hoeppner: > Wietse Venema put forth on 11/27/2009 5:17 PM: > > Stan Hoeppner: > >> I'm running my Postfix firewall behind NAT/PAT and the setup didn't > >> require any non-default Postfix settings to make it work. I port > >> forwarded TCP 25 from my router to my internal Postfix host IP and

Re: Postfix Deployment

2009-11-27 Thread Stan Hoeppner
Wietse Venema put forth on 11/27/2009 5:17 PM: > Stan Hoeppner: >> I'm running my Postfix firewall behind NAT/PAT and the setup didn't >> require any non-default Postfix settings to make it work. I port >> forwarded TCP 25 from my router to my internal Postfix host IP and all >> worked without iss

Re: Postfix Deployment

2009-11-27 Thread Wietse Venema
Stan Hoeppner: > I'm running my Postfix firewall behind NAT/PAT and the setup didn't > require any non-default Postfix settings to make it work. I port > forwarded TCP 25 from my router to my internal Postfix host IP and all > worked without issue. What settings are you referring to? proxy_inter

Re: Postfix Deployment

2009-11-27 Thread /dev/rob0
On Fri, Nov 27, 2009 at 03:42:56PM -0500, Roman Gelfand wrote: > On Fri, Nov 27, 2009 at 1:48 PM, Stan Hoeppner wrote: > > Ralf Hildebrandt put forth on 11/27/2009 6:20 AM: > > > >> Then it of course needs a publich IP addresses > > > > Or, at least, a public IP NAT/PAT'd to it by your firewall.  

Re: Postfix Deployment

2009-11-27 Thread Peter Blair
Well, I see no reason to have a MTA running on a public IP. As stated above in the thread, as long as your server is HELO'ing out as the name associated with the PTR record for its SRC-NAT, then you should be fine. On Fri, Nov 27, 2009 at 3:42 PM, Roman Gelfand wrote: > On Fri, Nov 27, 2009 at 1

Re: Postfix Deployment

2009-11-27 Thread Roman Gelfand
On Fri, Nov 27, 2009 at 1:48 PM, Stan Hoeppner wrote: > Ralf Hildebrandt put forth on 11/27/2009 6:20 AM: > >> Then it of course needs a publich IP addresses > > Or, at least, a public IP NAT/PAT'd to it by your firewall.  It will > also obviously need PTR, A, and MX records. > > Also, this may be

Re: Postfix Deployment

2009-11-27 Thread Ralf Hildebrandt
* Roman Gelfand : > On Fri, Nov 27, 2009 at 3:00 AM, Ralf Hildebrandt > wrote: > > * Roman Gelfand : > > > >> Is it preferable that machine running postfix should have publlic > >> address as opposed NATed address? > > > > That depends on what you want to use it for > > >I want to use it to fi

Re: Postfix Deployment

2009-11-27 Thread Roman Gelfand
On Fri, Nov 27, 2009 at 3:00 AM, Ralf Hildebrandt wrote: > * Roman Gelfand : > >> Is it preferable that machine running postfix should have publlic >> address as opposed NATed address? > > That depends on what you want to use it for > I want to use it to filter spam and to send ham to internal

Re: Postfix Deployment

2009-11-27 Thread Ralf Hildebrandt
* Roman Gelfand : > Is it preferable that machine running postfix should have publlic > address as opposed NATed address? That depends on what you want to use it for > It appears that as postfix handing control to various plugins, the > source address of the message is 127.0.0.1. Is there a co