Open Relay - Postfix

[rcoyle]

I have the need to allow a specific client to relay messages with out authentication. The client does not support authenticated emails.

I have modified main.cf in init.d\postfix it looks like this:

Code: Select all

# See /usr/share/postfix/main.cf.dist for a commented, more complete version

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

# Entries that might change
# myhostname = bubba
mydomain = localdomain
relayhost =
home_mailbox = Mail/
mynetworks_style = subnet
mynetworks = 172.16.10.0/24

mydestination = $myhostname $mydomain localhost.$mydomain localhost

alias_maps = ash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all


disable_vrfy_command = yes
smtpd_helo_required = yes
smtpd_recipient_restrictions =
 permit_mynetworks
 permit

the ip of my 'client' is 172.16.10.3
I cannot send mail from this client.

Any help?

Thanks.

[tor]

Hi rcoyle,

Is then line:

Code: Select all

alias_maps = ash:/etc/aliases

an error or a typo when doing the post? It could perhaps render your main.cf unparsable.

Other than that i think your config should work, when just skimming it. But opening up the whole subnet for relay seems a bit generous It might work with a single host entry ie,

Code: Select all

mynetworks = 172.16.10.3/32

And remember that this really isn't very safe at all.

/Tor

[rcoyle]

Thanks:

For what it is worth - I ended up just reloading the BUBBA updating it and redoing my changes. The only additional changes I made were commenting out mynetworks_style = subnet and adding the mynetworks = 172.16.10.0/24 back in. Apparently I had somehow deleted something erroneously with VI - Imagine that.....

I have looked at the copy of the main.cf I had, and it did have the incorrect line, that was probably it all along....