From 173b2f6655e38657f15bb57fe26dc23e8d054d4e Mon Sep 17 00:00:00 2001 From: itojun Date: Tue, 13 Mar 2001 17:45:02 +0000 Subject: postfix release-20010228 --- gnu/dist/postfix/html/basic.html | 96 +++++++++++++++++++++++++++++++++++----- 1 file changed, 85 insertions(+), 11 deletions(-) (limited to 'gnu/dist/postfix/html/basic.html') diff --git a/gnu/dist/postfix/html/basic.html b/gnu/dist/postfix/html/basic.html index 19635f6f9bc..3333296b739 100644 --- a/gnu/dist/postfix/html/basic.html +++ b/gnu/dist/postfix/html/basic.html @@ -32,6 +32,9 @@ three parameters before you can use the Postfix mail system:
  • What domains to receive mail for +

    + +

  • What clients to relay mail for @@ -158,6 +161,25 @@ hostnames of the machine, including $myhostname, and localhost.$mydomain. +

    What clients to relay mail for

    + +By default, Postfix will relay mail for clients in authorized +networks and in authorized domains. + +

    + +Authorized client networks are defined by the mynetworks parameter. The default is to +authorize all clients in the IP subnetworks that the local machine +is attached to. + +

    + +Authorized client domains are by defined by the relay_domains configuration +parameter. The default setting trusts clients with hostnames below +the domain(s) listed in mydestination. +

    What trouble to report to the postmaster

    @@ -286,17 +308,59 @@ top-level domain).

    My own networks

    The mynetworks parameter lists all networks that this machine -is attached to. This information can be used by the -anti-UCE features to distinguish between local systems and -strangers. +somehow trusts. This information can be used by the +anti-UCE features to recognize trusted SMTP clients that are +allowed to relay mail through Postfix. + +

    + +You can specify the list of trusted networks in the main.cf +file, or you can let Postfix deduce the list for you. The default +is to let Postfix do the work for you. + +

    + +

    + +
    Default: + +
    mynetworks_style = subnet + +

    + +

    The meaning of the styles is as follows:

    -By default, mynetworks is set to the class A, B or C networks -that the machine is attached to. For example, for my machines at -home, the result is: 168.100.0.0/16 127.0.0.0/8. However, -network 168.100 is owned by my ISP. Of course I do not want -to consider all their customer systems as local, so I use instead: +

    + +
    class
    Trust SMTP clients in the class A/B/C networks +that Postfix is connected to. Don't do this with a dialup site +- it would cause Postfix to "trust" your entire provider's network. +Instead, specify an explicit mynetworks list by hand, as described +below. + +

    + +

    subnet (default)
    Trust SMTP clients in the IP +subnetworks that Postfix is connected to. + +

    + +

    host
    Trust only the local machine. + +
    + +
    + +

    + +Alternatively, you can specify the mynetworks list by hand, +in which case Postfix ignores the mynetworks_style setting. +To specify the list of trusted networks by hand, specify network +blocks in CIDR (network/mask) notation, for example: + +

    @@ -304,6 +368,11 @@ to consider all their customer systems as local, so I use instead:
    +

    + +You can also specify the absolute pathname of a pattern file instead +of listing the patterns in the main.cf file. +

    My own network addresses

    The inet_interfaces parameter specifies all network interface @@ -316,9 +385,14 @@ as if it is addressed to a domain listed in $mydestination. The default is to listen on all active interfaces. If you run mailers on virtual interfaces, you will have to specify what -interfaces to listen on. This includes the non-virtual mailer that -receives mail for the machine itself as well: it should never listen -on the virtual interfaces or you would have a mailer loop. +interfaces to listen on. + +

    + +You even have to specify explicit machine interfaces for the +non-virtual mailer that receives mail for the machine itself: the +non-virtual mailer should never listen on the virtual interfaces +or you would have a mailer loop.

    -- cgit