Securing Postfix

asankaan · n00b Joined: 17 Jul 2006 Posts: 60

Hi,

I have set up a mail server using postfix.
Users in my local network ('mynetwork') can send anonymous emails to any other person ( e.g. user 'A' can use smtp commands to send emails as they are sent by user 'B').
Is it possible to setup any authentication method to authenticate my local network users when sending emails?
Hope my question is clear enough!

Thanks in Advance.
Asanka

Veldrin · Posted: Wed Jul 04, 2012 12:23 pm Post subject:

yes it is.
remove your networks from mynetworks, as mynetworks are allowed to send mail unauthenticated.

for possible authentication method, have a look at the postfix documentation

V.
_________________
read the portage output!
If my answer is too concise, ask for an explanation.

asankaan · n00b Joined: 17 Jul 2006 Posts: 60

Thanks for the reply. I'll try that option

Thank you.
Asanka

cach0rr0 · Posted: Fri Jul 06, 2012 6:49 am Post subject:

should be able to just ^^remove your IP/range from $mynetworks, remove permit_mynetworks, and then enable sasl in postfix

sasl is the "glue" that ties your esmtp authentication to whichever backend, be it pam, mysql, imap, ldap, whatever.
/etc/sasl2/smtpd.conf controls the tying. permit_sasl_authenticated (and other choice SASL conf options) tell postfix to use the SASL mechanism.

it'll make more sense when you're balls deep into implementation, but that's the short version.
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash