[Postfixbuch-users] Postfix smtpd_*_restrictions

[Ralf Hildebrandt]

* Stefan Bielenberg <sbielenberg at ulysea.com>:
> Hallo,
> 
> was spricht gegen folgende Postfix Einstellungen, damit sollte doch dass
> meiste getan sein (bis auf RBL) oder fehlt sogar was oder ist in
> falscher Reihenfolge?
> 
> smtpd_recipient_restrictions =
>         permit_mynetworks
>         permit_tls_clientcerts
>         permit_sasl_authenticated
>         reject_unknown_recipient_domain
>         reject_non_fqdn_recipient
>         reject_unauth_destination
>         reject_unauth_pipelining
>         check_sender_access hash:/etc/postfix/local_blacklist
> 
> smtpd_sender_restrictions =
>         permit_mynetworks
>         permit_tls_clientcerts
>         permit_sasl_authenticated
>         reject_unknown_sender_domain
>         reject_non_fqdn_sender
>         reject_unauth_pipelining
> 
> smtpd_helo_required     = yes
> smtpd_helo_restrictions =
>         permit_tls_clientcerts
>         permit_sasl_authenticated
>         permit_mynetworks
>         reject_invalid_hostname
>         reject_non_fqdn_hostname
>         reject_unauth_pipelining

Oder kürzer:

smtpd_helo_restrictions =

smtpd_sender_restrictions =

smtpd_recipient_restrictions =
        permit_mynetworks
        permit_tls_clientcerts
        permit_sasl_authenticated
        reject_unauth_destination
        reject_non_fqdn_recipient
        reject_unknown_recipient_domain
        reject_non_fqdn_sender
        reject_unknown_sender_domain
        reject_unauth_pipelining
        check_sender_access hash:/etc/postfix/local_blacklist
        reject_invalid_hostname
        reject_non_fqdn_hostname
        reject_unauth_pipelining

-- 
Ralf Hildebrandt (Ralf.Hildebrandt at charite.de)             plonk at charite.de
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.postfix-buch.com
The Tao that is seen
Is not the true Tao-until
You bring fresh toner.