[FUG-BR] Relay access denied - postfix

[Augusto Fabiano Torres]

Oi Fábio,
Sou novato em postfix (estou gostando muito dele) mas vou tentar!
Segue o meu main.cf que está funcionando a contento. 
Ainda alguns spams passam pelo filtro mas está melhor que quendo usava
o sendmail!
Assim aproveito para os espqcialistas darem uma analisada nele e ver se tem 
falhas  :-) 
[]
Augusto

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/local/libexec/postfix
debug_peer_level = 2
empty_address_recipient = MAILER-DAEMON
html_directory = no
inet_interfaces = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = /usr/local/bin/procmail
mailbox_size_limit = 0
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = dominio.com.br
myhostname = hostname.com.br
mynetworks = 127.0.0.0/8, 123.123.123.0/26
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
queue_minfree = 120000000
readme_directory = no
relay_domains = localhost
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
smtpd_banner = $myhostname ESMTP $mail_name

########################
# Regras para utilizacao de SASL SMTP AUTH

smtpd_client_restrictions =
       permit_mynetworks,
       reject_unknown_client,
       reject_unauth_pipelining,
       reject_rbl_client relays.ordb.org,
       reject_rbl_client sbl-xbl.spamhaus.org,
       reject_rbl_client bl.spamcop.net,
       reject_rhsbl_client blackhole.securitysage.com

smtpd_sender_restrictions =
       permit_mynetworks,
       check_sender_access hash:/usr/local/etc/postfix/access,
       reject_unknown_sender_domain,
       reject_invalid_hostname,
       reject_non_fqdn_sender,
       reject_unauth_pipelining,
       check_relay_domains

########################
# Restringe o envio para determinos destinatarios
smtpd_recipient_restrictions =
       permit_mynetworks,
       reject_invalid_hostname,
       reject_unknown_hostname,
       reject_unauth_pipelining,
       reject_unauth_destination,
       permit_sasl_authenticated,
       reject_unauth_destination,
       check_relay_domains

########################
# Determina contas somente de interno e local
smtpd_restriction_classes=internos,locais
internos=check_sender_access hash:/usr/local/etc/postfix/contas_locais,reject
locais=check_recipient_access hash:/usr/local/etc/postfix/contas_locais,reject

## com relay externo ##
#smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_pass
#smtpd_delay_reject = yes

#====== SASL ================
#smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
   check_relay_domains



Fabio Coelho escreveu:

>Olá a todos da lista. Estou com um probleminha no meu postfix. Alguem 
>poderia dar um help?
>   
>  postfix/smtpd[826]: NOQUEUE: reject: RCPT from unknown[172.17.2.1]: 
>554 user em dominio.com: Relay access denied; from=<user em dominio.com.br> 
>to=<user em dominio.com> proto=SMTP helo=<matrix>
>Mar 22 11:40:05 servidor postfix/smtpd[826]: disconnect from 
>unknown[172.17.2.1]
>   
>  Abaixo segue a conf do main.cf:
>   
>  alias_database = hash:/etc/aliases
>alias_maps = hash:/etc/aliases
>command_directory = /usr/local/sbin
>config_directory = /usr/local/etc/postfix
>daemon_directory = /usr/local/libexec/postfix
>debug_peer_level = 2
>html_directory = no
>mail_spool_directory = /var/spool/mail
>mailq_path = /usr/local/bin/mailq
>manpage_directory = /usr/local/man
>mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, 
>mail.$mydomain, www.$mydomain, ftp.$mydomain
>myhostname = servidor.dominio.com.br
>mynetworks = 172.17.2.0/24, 10.35.40.0/24,127.0.0.0/8
>mynetworks_style = class
>myorigin = $mydomain
>newaliases_path = /usr/local/bin/newaliases
>readme_directory = no
>relay_domains = $mydestination
>sample_directory = /usr/local/etc/postfix
>sendmail_path = /usr/local/sbin/sendmail
>setgid_group = maildrop
>unknown_local_recipient_reject_code = 550
>
>Qualquer ajuda será bem vinda.
>   
>  Abraços.
>
>
>
>
>		
>---------------------------------
> Yahoo! Acesso Grátis 
> Internet rápida e grátis. Instale o discador agora!
>		
>---------------------------------
> Yahoo! Acesso Grátis 
> Internet rápida e grátis. Instale o discador agora!
>_______________________________________________
>freebsd mailing list
>freebsd em fug.com.br
>http://lists.fug.com.br/listinfo.cgi/freebsd-fug.com.br
>  
>
_______________________________________________
freebsd mailing list
freebsd em fug.com.br
http://lists.fug.com.br/listinfo.cgi/freebsd-fug.com.br