Monday, July 23, 2018

postfix - Best Practices for Open Relay Email Server



I have a scenario where I need to setup postfix with no TLS, no SMTP authentication, and open relay allowing from only one remote IP address.
Emails from this remote IP may have spoofed "from" address as well.



I know, dont ask about how I got to this point...




My concern is that my server will be blacklisted in the future.



What are the best practices for managing open relay server so that it will not be blacklisted??



Thanks in advance.


Answer



It's not an open relay if you are merely accepting any mail from a single IP address. (Open relays accept any mail from anywhere.)



In this case, simply add the IP address to mynetworks in your Postfix main.cf.




Oh, and don't send spam.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...