postfix, mailscanner, mail relay

[Ugo Bellavance]

> -----Message d'origine-----
> De : Harondel J. Sibble [mailto:mailscanner at pdscc.com]
> Envoyé : Sunday, December 28, 2003 9:05 PM
> À : MAILSCANNER at JISCMAIL.AC.UK
> Objet : postfix, mailscanner, mail relay
> 
> 
> Okay, configuring a box (mdk9.2) running mailscanner, SA and f-prot to
> protect an internal mailserver that is not directly 
> accessible from the net
> (local lan usage only). The net accessible box running 
> mailscanner will be
> configured to relay all inbound mail to the internal 
> mailserver. The internal
> mailserver will use the mailscanner box as it's outbound relay. The
> mailscanner box is listed as the primary mx for the domain 
> and only relays
> in/outbound while scanning mail for spam and viruses.
> 
> Now as part of Mailscanner's setup, one sets up 2 instances 
> of postfix, with
> mailscanner doing it's work in between the 2 instances.  In a 
> single instance
> (standard) setup of postfix, setup to relay for the internal 
> server would be
> accomplished by setting (as per Blum's Open Source Email Security)
> 
> set postfix to no accept any messges even for localhost
> relay_domains =
> 
> setup a transport table
> mydomain.net smtp:internal-mailserver.mydomain.net
> 
> create the transport database
> postmap hash: /etc/postfix/transport
> 
> add to main.cf
> transport_maps = hash:/etc/postfix/transport
> 
> reload postfix and all should be okay

never reload postfix, reload mailscanner.  You don't want to see standalone postfix instances wandering around.
> 
> Just want to make sure, in conjunction with Mailscanner, 
> these modifcations
> should be done for the outgoing postfix instance, correct? ie the
> /etc/postfix dir ather than /etc/postfix.in

Have you read the faqs?

http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/152.html

http://www.sng.ecs.soton.ac.uk/mailscanner/install/postfix.shtml


hth

Thanks

Ugo
> 
> 
> --
> Harondel J. Sibble
> Sibble Computer Consulting
> Creating solutions for the small business and home computer user.
> help at pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com
> (604) 739-3709 (voice/fax)      (604) 686-2253 (pager)
>