<div dir="ltr"><div><div>Why would you want this? In effect you'd defeat the whole purpose of the mynetworks setting, and with that the builtin relay security model in postfix... Not desirable at all;-).<br><br></div>Cheerrs!<br>-- <br></div>-- Glenn<br></div><div class="gmail_extra"><br><div class="gmail_quote">2017-01-13 23:34 GMT+01:00 Peter Lemieux <span dir="ltr"><<a href="mailto:mailscanner@replies.cyways.com" target="_blank">mailscanner@replies.cyways.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">If mail is coming from all over the Internet to your host, setting<br>
<br>
mynetworks = <a href="http://0.0.0.0/0" rel="noreferrer" target="_blank">0.0.0.0/0</a><br>
<br>
in <a href="http://main.cf" rel="noreferrer" target="_blank">main.cf</a> works as well. Many modern distributions like Ubuntu have only 127.0.0.1 and similar local addresses in the mynetworks field by default.<br>
<br>
I recommend reading <a href="http://www.postfix.org/SMTPD_ACCESS_README.html" rel="noreferrer" target="_blank">http://www.postfix.org/SMTPD_A<wbr>CCESS_README.html</a> for a comprehensive overview of how Postfix handles incoming mail.<br>
<br>
Peter<span class=""><br>
<br>
<br>
On 01/13/2017 05:30 PM, Danita Zanre wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
Ah! See, something simple! Because this was all coming from “localhost” it<br>
was working - I think I know now!<br>
<br>
Let me work on that.<br>
<br>
<br>
<br></span>
*Danita Zanrè*, /Move Out of the Office/<span class=""><br>
I love my job, and you can too!<br>
Tel: <a href="tel:%28720%29%20319-7530" value="+17203197530" target="_blank">(720) 319-7530</a> - Caledonia Network Consulting<br>
Tel: <a href="tel:%28720%29%20319-8240" value="+17203198240" target="_blank">(720) 319-8240</a> - Move Out of the Office<br>
<br>
<br>
On January 13, 2017 at 4:32:33 PM, Shawn Iverson<br></span><span class="">
(<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a> <mailto:<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12<wbr>.in.us</a>>) wrote:<br>
<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
I don't see a relay_domains definition in your config<br>
<br>
relay_domains = hash:/etc/postfix/transport<br>
<br>
On Fri, Jan 13, 2017 at 5:21 PM, Danita Zanre <<a href="mailto:danita@caledonia.net" target="_blank">danita@caledonia.net</a><br></span><span class="">
<mailto:<a href="mailto:danita@caledonia.net" target="_blank">danita@caledonia.net</a>>> wrote:<br>
<br>
so, for example,<br>
<br></span>
<a href="http://caledonia.net" rel="noreferrer" target="_blank">caledonia.net</a> <<a href="http://caledonia.net" rel="noreferrer" target="_blank">http://caledonia.net</a>> smtp:192.223.10.61<span class=""><br>
<br>
<br>
And it works fine until we have mail coming directly to the<br>
mailscanner server.<br>
<br>
<br>
Full disclosure:<br>
<br>
<br>
We have a xeams server that we are replacing. It and mailscanner are<br>
on the same box. So, during the switchover, mail has been coming to<br>
the xeams server, it has been set to not scan anything, and then it<br>
relays to 127.0.0.1 for postfix to pick it up. I did it this way,<br>
because we have multiple domain names, and I was switching them over<br>
one at a time to make sure there were no problems. Xeams continued to<br></span>
scan for <a href="http://zanre.com" rel="noreferrer" target="_blank">zanre.com</a> <<a href="http://zanre.com" rel="noreferrer" target="_blank">http://zanre.com</a>>, for example, and passed mail<br>
for <a href="http://caledonia.net" rel="noreferrer" target="_blank">caledonia.net</a> <<a href="http://caledonia.net" rel="noreferrer" target="_blank">http://caledonia.net</a>> unscanned to<span class=""><br>
postix/mailscanner via localhost.<br>
<br>
<br>
So, if I set postfix to listen on all interfaces and turn the xeams<br>
server off, nothing has really changed except the mail is hitting<br>
postfix first. I also have postscreen on in “ignore” mode until I can<br>
make sure that everything else works, and then I had intended to set<br>
postscreen to “enable”.<br>
<br>
<br>
Thanks<br>
<br>
<br></span>
*Danita Zanrè*, /Move Out of the Office/<span class=""><br>
I love my job, and you can too!<br></span>
Tel: <a href="tel:%28720%29%20319-7530" value="+17203197530" target="_blank">(720) 319-7530</a> <tel:(720)%20319-7530> - Caledonia Network Consulting<br>
Tel: <a href="tel:%28720%29%20319-8240" value="+17203198240" target="_blank">(720) 319-8240</a> <tel:(720)%20319-8240> - Move Out of the Office<span class=""><br>
<br>
<br>
On January 13, 2017 at 4:15:33 PM, Shawn Iverson<br></span>
(<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a> <mailto:<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12<wbr>.in.us</a>>)<br>
wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
What's in your transport maps?<br>
<br>
On Fri, Jan 13, 2017 at 5:00 PM, Danita Zanre <<a href="mailto:danita@caledonia.net" target="_blank">danita@caledonia.net</a><br></span><span class="">
<mailto:<a href="mailto:danita@caledonia.net" target="_blank">danita@caledonia.net</a>>> wrote:<br>
<br>
Sorry - this is a dumb postfix question I’m sure - it’s been awhile!<br>
<br>
In setting up my system, I had my mailscanner server behind our<br>
existing anti-spam server so that I could test it. So,<br>
everything was coming from the existing anti-spam server as a<br>
front-end relay server. Working perfectly, but now I’m ready to<br>
move forward.<br>
<br>
But when I redirect mail to come directly to the new mailscanner<br>
server, everything says Relay access denied.<br>
<br>
So, for some reason, postfix is ONLY accepting mail from the<br></span>
relay server. Here’s what is in <a href="http://main.cf" rel="noreferrer" target="_blank">main.cf</a> <<a href="http://main.cf" rel="noreferrer" target="_blank">http://main.cf</a>> -<span class=""><br>
please tell me what silly thing I’ve overlooked! I’ve togged the<br>
sender_restrictions on and off thinking something was in there.<br>
<br>
Thanks<br>
<br>
inet_protocols = all<br>
<br>
biff = no<br>
<br>
mail_spool_directory = /var/mail<br>
<br>
canonical_maps = hash:/etc/postfix/canonical<br>
<br>
virtual_alias_maps = hash:/etc/postfix/virtual<br>
<br>
virtual_alias_domains = hash:/etc/postfix/virtual<br>
<br>
relocated_maps = hash:/etc/postfix/relocated<br>
<br>
transport_maps = hash:/etc/postfix/transport<br>
<br>
sender_canonical_maps = hash:/etc/postfix/sender_canon<wbr>ical<br>
<br>
masquerade_exceptions = root<br>
<br>
masquerade_classes = envelope_sender, header_sender, header_recipient<br>
<br></span>
myhostname = <a href="http://iris.caledonia.net" rel="noreferrer" target="_blank">iris.caledonia.net</a> <<a href="http://iris.caledonia.net" rel="noreferrer" target="_blank">http://iris.caledonia.net</a>><div><div class="h5"><br>
<br>
delay_warning_time = 1h<br>
<br>
message_strip_characters = \0<br>
<br>
#inet_interfaces = localhost<br>
<br>
inet_interfaces = all<br>
<br>
masquerade_domains =<br>
<br>
mydestination = $myhostname, localhost.$mydomain<br>
<br>
defer_transports =<br>
<br>
mynetworks_style = subnet<br>
<br>
disable_dns_lookups = no<br>
<br>
relayhost =<br>
<br>
mailbox_command =<br>
<br>
mailbox_transport =<br>
<br>
strict_8bitmime = no<br>
<br>
disable_mime_output_conversion = no<br>
<br>
#smtpd_sender_restrictions = hash:/etc/postfix/access<br>
<br>
smtpd_client_restrictions =<br>
<br>
smtpd_helo_required = no<br>
<br>
smtpd_helo_restrictions =<br>
<br>
strict_rfc821_envelopes = no<br>
<br>
smtpd_recipient_restrictions =<br>
permit_mynetworks,reject_unaut<wbr>h_destination,reject_unknown_<wbr>recipient_domain,reject_<wbr>unverified_recipient,reject_<wbr>unauth_pipelining,permit_auth_<wbr>destination,reject<br>
<br>
smtp_sasl_auth_enable = no<br>
<br>
smtpd_sasl_auth_enable = no<br>
<br>
smtpd_use_tls = no<br>
<br>
smtp_use_tls = no<br>
<br>
smtp_enforce_tls = no<br>
<br>
alias_maps = hash:/etc/aliases<br>
<br>
mailbox_size_limit = 0<br>
<br>
message_size_limit = 91820000<br>
<br>
default_process_limit = 100<br>
<br>
<br>
postscreen_access_list = permit_mynetworks,<br>
cidr:/etc/postfix/postscreen_a<wbr>ccess.cidr<br>
<br>
postscreen_greet_action = ignore<br>
<br>
<br>
<br></div></div>
*Danita Zanrè*, /Move Out of the Office/<span class=""><br>
I love my job, and you can too!<br></span>
Tel: <a href="tel:%28720%29%20319-7530" value="+17203197530" target="_blank">(720) 319-7530</a> <tel:(720)%20319-7530> - Caledonia Network<br>
Consulting<br>
Tel: <a href="tel:%28720%29%20319-8240" value="+17203198240" target="_blank">(720) 319-8240</a> <tel:(720)%20319-8240> - Move Out of the Office<span class=""><br>
<br>
<br>
<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br></span>
<mailto:<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mail<wbr>scanner.info</a>><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>mailman/listinfo/mailscanner</a><span class=""><br>
<<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info<wbr>/mailman/listinfo/mailscanner</a>><br>
<br>
<br>
<br>
<br>
<br>
--<br>
Shawn Iverson<br>
Director of Technology<br>
Rush County Schools<br></span>
<a href="tel:765-932-3901%20x271" value="+17659323901" target="_blank">765-932-3901 x271</a> <tel:(765)%20932-3901><br>
<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a> <mailto:<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12<wbr>.in.us</a>><span class=""><br>
<br>
<br>
<br>
--<br>
This message has been scanned for viruses and<br></span>
dangerous content by *Iris MailScanner* <<a href="http://iris.caledonia.net/" rel="noreferrer" target="_blank">http://iris.caledonia.net/</a>>,<span class=""><br>
and is<br>
believed to be clean.<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br></span>
<mailto:<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mail<wbr>scanner.info</a>><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>mailman/listinfo/mailscanner</a><br>
<<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info<wbr>/mailman/listinfo/mailscanner</a>><br>
<br>
</blockquote><span class="">
<br>
<br>
<br>
--<br>
Shawn Iverson<br>
Director of Technology<br>
Rush County Schools<br>
<a href="tel:765-932-3901%20x271" value="+17659323901" target="_blank">765-932-3901 x271</a><br>
</span><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a> <mailto:<a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12<wbr>.in.us</a>><span class=""><br>
<br>
<br>
------------------------------<wbr>------------------------<br>
Powered by Xeams. Visit <a href="http://xeams.com" rel="noreferrer" target="_blank">xeams.com</a> for more information<br>
------------------------------<wbr>------------------------<br>
<br>
--<br>
This message has been scanned for viruses and<br></span>
dangerous content by *Iris MailScanner* <<a href="http://iris.caledonia.net/" rel="noreferrer" target="_blank">http://iris.caledonia.net/</a>>, and is<br>
believed to be clean.<br>
</blockquote>
<br>
<br>
<br>
<br>
</blockquote><div class="HOEnZb"><div class="h5">
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<wbr>info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/<wbr>mailman/listinfo/mailscanner</a><br>
<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">-- Glenn<br>email: glenn < dot > steen < at > gmail < dot > com<br>work: glenn < dot > steen < at > ap1 < dot > se</div>
</div>