Hello Everyone,
It's me again
I wish to enable account auto creation. I believe my server
is protected
against dictionary attacks. I use the following Postfix
restrictions:
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_non_fqdn_hostname,
reject_non_fqdn_sender, reject_non_fqdn_recipient,
reject_unauth_destination, reject_unauth_pipelining,
reject_invalid_hostname
I see lots of the following in my mail log:
NOQUEUE: reject: RCPT from unknown[201.240.27.159]: 550
5.1.1
<adm josephite.com>:
Recipient address rejected: User unknown in virtual mailbox
table;
from=<tomoawut next-co.co.jp> to=<adm josephite.com> proto=SMTP
helo=<next-co.co.jp>
So I am thinking I have this correct: Postfix is looking up
the user in
the Postfixadmin database before accepting the mail and
rejecting it if
it doesn't exist.
I have seen something in the past about the order of the
statements in
the 'smtpd_recipient_restrictions' directive but I cannot
seem to find
it now. So I would also ask if anyone knows where that is or
if I have
my statements in the correct order to keep me protected if I
enable user
account autocreation.
As always, Thanks in Advance!
Regards,
Brian Carroll
Member; Managing Consultant
Secure Network Designs, LLC.
www.securenetdesigns.com
_______________________________________________
Maia-users mailing list
Maia-users renaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users
|