Re: SMTP Smart Host Security Best Practices?

2021-05-11 Thread Bryan K. Walton
it This is all very helpful! And it gives us a lot of good ideas for further locking down this smart host, should we decide to implement it. Thanks, Bryan

Re: SMTP Smart Host Security Best Practices?

2021-05-11 Thread Matus UHLAR - fantomas
). and from mail servers sending mail to any domain where we are the final destination. common for mail servers. We are considering setting up an SMTP smart host server for a few entities that would be allowed to relay through our server. My question is: What do you mean smart host? Do you

SMTP Smart Host Security Best Practices?

2021-05-11 Thread Bryan K. Walton
g mail to any domain where we are the final > destination. > > We are considering setting up an SMTP smart host server for a few > entities that would be allowed to relay through our server. My > question is: > > Is there any security benefits to creating this smart host as

Re: Smart Host

2015-04-08 Thread Noel Jones
On 4/8/2015 6:48 PM, Ray Dzek wrote: > Hi, > > > > I have a configuration change to make to our postfix relays and I > want to confirm it will work as intended (before I mis-route email > for 1,000 people). > > > > I think I have what is a fairly common Postfix environment – > > > > Dua

Smart Host

2015-04-08 Thread Ray Dzek
Hi, I have a configuration change to make to our postfix relays and I want to confirm it will work as intended (before I mis-route email for 1,000 people). I think I have what is a fairly common Postfix environment - Dual instances - Instance 1 for inbound - AmavisD, Spamassassin, and some oth

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-10 Thread Robert Schetterer
Am 09.01.2012 21:48, schrieb Noel Jones: > On 1/9/2012 2:24 PM, Ben Curtis wrote: >> First off, thanks for the help everyone! >> >>> Test postfix TLS with openssl to make sure postfix is working correctly. >>> >>> For port 25 (or 587) with STARTTLS >>> # openssl s_client -connect example.com:25 -st

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-10 Thread Robert Schetterer
Am 09.01.2012 18:16, schrieb Noel Jones: > On 1/9/2012 10:19 AM, Ben Curtis wrote: >> Hi all, >> >> I've been scouring the internet trying to find someone who's done this >> before, and am at a loss. >> >> I've got Postfix set up as a Smart Ho

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-09 Thread Noel Jones
On 1/9/2012 2:24 PM, Ben Curtis wrote: > First off, thanks for the help everyone! > >> Test postfix TLS with openssl to make sure postfix is working correctly. >> >> For port 25 (or 587) with STARTTLS >> # openssl s_client -connect example.com:25 -starttls smtp >> > > I'm using 587, and this seem

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-09 Thread Ben Curtis
First off, thanks for the help everyone! >Test postfix TLS with openssl to make sure postfix is working correctly. > >For port 25 (or 587) with STARTTLS ># openssl s_client -connect example.com:25 -starttls smtp > I'm using 587, and this seemed to functioned just fine from a remote host: ---

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-09 Thread Noel Jones
On 1/9/2012 10:19 AM, Ben Curtis wrote: > Hi all, > > I've been scouring the internet trying to find someone who's done this > before, and am at a loss. > > I've got Postfix set up as a Smart Host for sending SMTP email from > Exchange 2010 (Small Busines

Re: Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-09 Thread Robert Schetterer
Am 09.01.2012 17:19, schrieb Ben Curtis: > Hi all, > > I've been scouring the internet trying to find someone who's done this > before, and am at a loss. > > I've got Postfix set up as a Smart Host for sending SMTP email from > Exchange 2010 (Small Busines

Postfix as a Smart Host for Exchange 2010 with TLS

2012-01-09 Thread Ben Curtis
Hi all, I've been scouring the internet trying to find someone who's done this before, and am at a loss. I've got Postfix set up as a Smart Host for sending SMTP email from Exchange 2010 (Small Business Server 2011). My problem is that I can't get TLS to work. The error m

Re: Smart Host Configuration

2010-12-26 Thread Stan Hoeppner
Roman Gelfand put forth on 12/26/2010 7:09 PM: > I have one last question. Since postfix's header information is most > meaningful, is there a setting that would allow me to strip all the > previous header info (in this case exchange's)? Yes. This was covered somewhat recently on the list, and s

Re: Smart Host Configuration

2010-12-26 Thread Roman Gelfand
I have one last question. Since postfix's header information is most meaningful, is there a setting that would allow me to strip all the previous header info (in this case exchange's)? Thanks On Sun, Dec 26, 2010 at 8:09 AM, Stan Hoeppner wrote: > Roman Gelfand put forth on 12/25/2010 6:06 PM:

Re: Smart Host Configuration

2010-12-26 Thread Jeroen Geilman
On 12/26/10 1:58 PM, Stan Hoeppner wrote: mouss put forth on 12/26/2010 4:13 AM: Le 26/12/2010 05:12, Roman Gelfand a écrit : On Fri, Dec 24, 2010 at 4:20 PM, Stan Hoeppner wrote: Roman Gelfand put forth on 12/24/2010 10:45 AM: I neglected to mention the exchange server, source outbound se

Re: Smart Host Configuration

2010-12-26 Thread Stan Hoeppner
Roman Gelfand put forth on 12/25/2010 6:06 PM: > Actually, the original proble reported with the previous post namely > connection timeout was resolved. After checking tcpdump, I realized > outgoing smtp port was closed. > > But, as it appears, this email was not in vain. I need to use a > diffe

Re: Smart Host Configuration

2010-12-26 Thread Stan Hoeppner
mouss put forth on 12/26/2010 4:13 AM: > Le 26/12/2010 05:12, Roman Gelfand a écrit : >> On Fri, Dec 24, 2010 at 4:20 PM, Stan Hoeppner >> wrote: >>> Roman Gelfand put forth on 12/24/2010 10:45 AM: I neglected to mention the exchange server, source outbound server, is on internal edge

Re: Smart Host Configuration

2010-12-26 Thread mouss
Le 26/12/2010 05:12, Roman Gelfand a écrit : > On Fri, Dec 24, 2010 at 4:20 PM, Stan Hoeppner wrote: >> Roman Gelfand put forth on 12/24/2010 10:45 AM: >>> I neglected to mention the exchange server, source outbound server, >>> is on internal edge of the dmz. >> >> Bah, you did mention the Exchan

Re: Smart Host Configuration

2010-12-25 Thread Roman Gelfand
2010 at 12:02 AM, Stan Hoeppner >> wrote: >>> Roman Gelfand put forth on 12/23/2010 10:01 PM: >>> >>>> I am now looking to use the postfix mail gateway, smart host, >>>> to send mail out.  Specifically, I would like to bypass all of >>>>

Re: Smart Host Configuration

2010-12-25 Thread Roman Gelfand
RVER > >> On Fri, Dec 24, 2010 at 12:02 AM, Stan Hoeppner >> wrote: >>> Roman Gelfand put forth on 12/23/2010 10:01 PM: >>> >>>> I am now looking to use the postfix mail gateway, smart host, >>>> to send mail out.  Specifically, I would li

Re: Smart Host Configuration

2010-12-24 Thread Victor Duchovni
On Fri, Dec 24, 2010 at 03:20:11PM -0600, Stan Hoeppner wrote: > > I neglected to mention the exchange server, source outbound server, > > is on internal edge of the dmz. > > Bah, you did mention the Exchange server and I just missed it. The 587 > is more geared toward MUAs like Outlook and TBi

Re: Smart Host Configuration

2010-12-24 Thread Stan Hoeppner
ant to relay the mail from _only_ the Exchange server simply have, I think. mynetworks = 127.0.0.0/8, IP_OF_EXCH_SERVER > On Fri, Dec 24, 2010 at 12:02 AM, Stan Hoeppner > wrote: >> Roman Gelfand put forth on 12/23/2010 10:01 PM: >> >>> I am now looking to use the

Re: Smart Host Configuration

2010-12-24 Thread Roman Gelfand
I neglected to mention the exchange server, source outbound server, is on internal edge of the dmz. On Fri, Dec 24, 2010 at 12:02 AM, Stan Hoeppner wrote: > Roman Gelfand put forth on 12/23/2010 10:01 PM: > >> I am now looking to use the postfix mail gateway, smart host, >>

Re: Smart Host Configuration

2010-12-23 Thread Stan Hoeppner
Roman Gelfand put forth on 12/23/2010 10:01 PM: > I am now looking to use the postfix mail gateway, smart host, > to send mail out. Specifically, I would like to bypass all of > the checks done for incoming mail If you are referring to user submitted mail to be relayed to the outs

Re: Smart Host Configuration

2010-12-23 Thread Victor Duchovni
smtp server. Actually, you configured it as a content_filter between the SMTP server and the output side of Postfix. > Once an email is inspected, it is reinjected for > delivery. I am now looking to use the postfix mail gateway, smart > host, to send mail out. Specifically, I would

Smart Host Configuration

2010-12-23 Thread Roman Gelfand
looking to use the postfix mail gateway, smart host, to send mail out. Specifically, I would like to bypass all of the checks done for incoming mail and tightly control the outbound traffic. How can I accomplish this? Below, is my main.cf config_directory = /etc/postfix local_recipient_maps

Re: Postfix as a "extra smart host"

2009-10-13 Thread Joris Dobbelsteen
Fons van der Beek wrote: Hello all, I have a SBS server that has several users from different domains, receiving mails for several domains on the SBS box is no problem. The problem is in sending. Suppose I use postfix as an outgoing smarthost, but this smart host should rewrite the senders

Re: Postfix as a "extra smart host"

2009-10-12 Thread Patrick Ben Koetter
* Fons van der Beek : > Hello all, > > I have a SBS server that has several users from different domains, > receiving mails for several domains on the SBS box is no problem. > The problem is in sending. > > Suppose I use postfix as an outgoing smarthost, but this smart host

Postfix as a "extra smart host"

2009-10-12 Thread Fons van der Beek
Hello all, I have a SBS server that has several users from different domains, receiving mails for several domains on the SBS box is no problem. The problem is in sending. Suppose I use postfix as an outgoing smarthost, but this smart host should rewrite the senders adress. e.g. Exchange

Re: Conditional smart-host routing

2008-08-29 Thread Noel Jones
Marc SCHAEFER wrote: Replying to myself: no, it really works now. Maybe I looked at the wrong log entry. Thank you for your suggestions -- they work! Glad it worked. You had me worried there for a minute... -- Noel Jones

Re: Conditional smart-host routing

2008-08-29 Thread Marc SCHAEFER
Replying to myself: no, it really works now. Maybe I looked at the wrong log entry. Thank you for your suggestions -- they work!

Re: Conditional smart-host routing

2008-08-29 Thread Marc SCHAEFER
eneric.regexp I have this: transport_maps=hash:/etc/postfix/transport smtp_generic_maps = hash:/etc/postfix/generic, regexp:/etc/postfix/generic_regexp (I do some canonicalization) > # transport > through-smart-host smtp:[smart-host] > .through-smart-host smtp:[smart.host] and

Re: Conditional smart-host routing

2008-08-28 Thread mouss
Marc SCHAEFER wrote: Hi, I would like to configure a bizarre setup like this: if the mail is sent as usual, do not use a smart-host, just deliver (that is easy and works) if the recipient domain ends in ".through-smart-host", it should deliver via a SMTP relay (smart

Re: Conditional smart-host routing

2008-08-28 Thread Noel Jones
Marc SCHAEFER wrote: Hi, I would like to configure a bizarre setup like this: if the mail is sent as usual, do not use a smart-host, just deliver (that is easy and works) if the recipient domain ends in ".through-smart-host", it should deliver via a SMTP relay (smart

Conditional smart-host routing

2008-08-28 Thread Marc SCHAEFER
Hi, I would like to configure a bizarre setup like this: if the mail is sent as usual, do not use a smart-host, just deliver (that is easy and works) if the recipient domain ends in ".through-smart-host", it should deliver via a SMTP relay (smart-host). Of course, j

Re: SMART Host with multiple domains and Auth

2008-07-31 Thread Ralf Hildebrandt
* RSCL Mumbai <[EMAIL PROTECTED]>: > > Use sender_dependent_relayhost_maps > > > > I have done this: > > sender_dependent_relayhost_maps = hash:/etc/postfix/sender_dependent_relayhost > smtp_sender_dependent_authentication = yes > > What should be the construction of "

Re: SMART Host with multiple domains and Auth

2008-07-31 Thread RSCL Mumbai
On Thu, Jul 31, 2008 at 7:05 PM, Ralf Hildebrandt <[EMAIL PROTECTED]> wrote: > * RSCL Mumbai <[EMAIL PROTECTED]>: >> Hi >> >> I have setup my first Postfix on Fedora Core 9. >> The installation was very simple and the MTA is working fine. >> >> My MailServer is actually a "relay" server for all our

Re: SMART Host with multiple domains and Auth

2008-07-31 Thread Brian Evans
Brian Evans - Postfix List wrote: RSCL Mumbai wrote: Hi I have setup my first Postfix on Fedora Core 9. The installation was very simple and the MTA is working fine. My MailServer is actually a "relay" server for all our group domains. I need to setup Postfix such that it will forward all ema

Re: SMART Host with multiple domains and Auth

2008-07-31 Thread Brian Evans - Postfix List
RSCL Mumbai wrote: Hi I have setup my first Postfix on Fedora Core 9. The installation was very simple and the MTA is working fine. My MailServer is actually a "relay" server for all our group domains. I need to setup Postfix such that it will forward all emails to their respective hosts for d

Re: SMART Host with multiple domains and Auth

2008-07-31 Thread Ralf Hildebrandt
* RSCL Mumbai <[EMAIL PROTECTED]>: > Hi > > I have setup my first Postfix on Fedora Core 9. > The installation was very simple and the MTA is working fine. > > My MailServer is actually a "relay" server for all our group domains. > > I need to setup Postfix such that it will forward all emails t

SMART Host with multiple domains and Auth

2008-07-31 Thread RSCL Mumbai
Hi I have setup my first Postfix on Fedora Core 9. The installation was very simple and the MTA is working fine. My MailServer is actually a "relay" server for all our group domains. I need to setup Postfix such that it will forward all emails to their respective hosts for delivery. For example