[Postfixbuch-users] mailserver gehackt?

[Ralf Hildebrandt]

* Jens Kruse <j.kruse at econnex.de>:
> ># smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
> >smtpd_banner = $myhostname ESMTP
> >setgid_group = postdrop
> >biff = no
> >
> ># appending .domain is the MUA's job.
> >append_dot_mydomain = no
> >mydomain = domain-kiel.de
> >myhostname = mailserver.domain-kiel.de
> >alias_maps = hash:/etc/aliases
> >alias_database = hash:/etc/aliases
> >myorigin = /etc/mailname
> >mydestination = domain-kiel.de, mailserver.domain-kiel.de, 
> >localhost.domain-kiel.de, localhost
> ># relayhost =
> >relayhost = smtp.tng.de
> ># mynetworks = 127.0.0.0/8
> >mynetworks = 127.0.0.0/8, hash:/var/lib/pop-before-smtp/hosts
> >mailbox_command = procmail -a "$EXTENSION"
> >mailbox_size_limit = 0
> >recipient_delimiter = +
> >
> ># Nur von lokalem Rechner (mailserver) Post annehmen

> >smtpd_recipient_restrictions =
> >        check_sender_access hash:/etc/postfix/access,
> >        check_recipient_access hash:/etc/postfix/access,

Jedes OK in /etc/postfix/access macht dich zum offenen Relay.

> >        permit_sasl_authenticated,
> >        permit_mynetworks,
> >#       permit_mydomain,
> >#       reject_non_fqdn_recipient,
> >#       check_client_access hash:/etc/postfix/pop-before-smtp,
> >        check_client_access hash:/var/lib/pop-before-smtp/hosts,
> >#       permit_maps_rbl,
> >#       permit_mx_backup,
> >        check_relay_domains

Korrekt:

smtpd_recipient_restrictions =
   permit_sasl_authenticated
   permit_mynetworks
   check_client_access hash:/var/lib/pop-before-smtp/hosts
   reject_unauth_destination
   check_sender_access hash:/etc/postfix/sender_access 
   check_recipient_access hash:/etc/postfix/recipient_access


-- 
Ralf Hildebrandt (Im Auftrag des Referat V a)   Ralf.Hildebrandt at charite.de
Charite - Universitätsmedizin Berlin            Tel.  +49 (0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49 (0)30-450 570-916
IT-Zentrum Standort Campus Mitte                          AIM.  ralfpostfix