Ubuntu :: Postfix Configuration To Prevent External Connections?
Mar 14, 2010How can I configure Postfix to reject connections coming from anywhere except the local machine?
View 4 RepliesHow can I configure Postfix to reject connections coming from anywhere except the local machine?
View 4 RepliesI have exim setup on squeeze to run as an "internet site". Outgoing mail works fine but it seems to just ignore incoming smtp requests on port 25. I can see the incoming connection via tcpdump but exim doesn't seem to talk. If I connect via telnet it rather quickly says connection refused. Is there something additional I need in the Exim conf?
View 1 Replies View RelatedI'm a NOOB setting up Postfix but managed quite well by following the Ubuntu Server guide. I have managed to set it up using SSL but testing a mail client like thunderbird I can also connect to port 25 using no authentication. Connecting using SSL on port 465 by editing "master.cf" file works but 25 i still open.
1. How do I prevent clients to connect to port 25 without authentication?
2. I guess I have to have port 25 open in order to receive mail from the outside world?
I have a problem with my VPS not being able to send any emails to Yahoo! addresses. Each time someone with a mail account tries to send something to a Yahoo! address, the email stays stuck in the mail queue and a 'delayed mail (still trying)' message is sent back to the user. I understand that Yahoo! has a tendency to block mail servers on a whim, but what I'd like to know is, how can I prevent Postfix from specifically retrying to send emails to Yahoo! mail servers? I don't want to stop retries to other mail servers.
View 1 Replies View RelatedI have configured my postfix server to use TLS (STARTTLS) but with no certificates either on server or client. Here are the TLS parameters in main.cf.
=========
smtpd_tls_security_level = may
# Obsolete, but still supported
#smtpd_use_tls = yes
#smtp_use_tls = yes
[Code]....
I have a Hitachi SimpleDrive (LS-1000-EMEA) it has an "Auto-sleep" function which I believe is controlled by the enclosure itself.The problem I'm having is that when the drive goes to sleep Ubuntu does not seem to be able to wake it up again. I am running Karmic 9.10 as a stripped down install with XBMC as a front-end. I cannot access the drive at all when it does this.
I'm not sure if the problem is that the drive is formatted as NTFS. I notice that when the drive is connected to my Mac or PC it resumes no problem (with a slight delay as the drive gets out of standby) but with Ubuntu it just seems to stop responding. When I reboot the drive is not mounted by Ubuntu. Physically, the blue LED indicator on the drive is frozen (i.e. lit-up) rather than flashing as it normally would. I have to actually unplug (from the mains) and plug it back in for it to work.I have tried using sdparm, but as I say I think the sleep function is controlled by the enclosure and thus sdparm gives me no standby options.
I installed Ubuntu on a portable harddrive so that I can use it independently of my computer (when I visit my parents or my g/f). I performed the installation using a bootable Ubuntu thumbdrive, everything went fine but when I unplugged the thumbdrive and rebooted I got a kernel panic. I was able to boot into Ubuntu on my external drive once (I think it might have been due to reordering boot order in BIOS). My guess is that the kernel panic occurs due to the drive letter changing (sdb -> sdc) depending on which external devices are plugged in, but I'm not sure how to make sure that's the case. And if it is, how would I prevent this from happening?
View 2 Replies View RelatedI've got the following two subnets.
Code:
Subnet 1: 10.1.0.0/24
Subnet 2: 172.16.0.0/24
A machine in subnet 1 is natted to a static address in subnet 2. For instance 10.1.0.10 is natted to 172.16.0.10.
I have achieved this with the following iptables rule. (in addition to enabling forwarding)
Code:
iptables -t nat -A POSTROUTING -s 10.1.0.10 -j SNAT --to 172.16.0.10
So far this works perfectly. What I want to do now is to add another rule that only nats the machine in case it is NOT accessing subnet 1.
In other words, when this machine accesses any other machine in subnet 1, it should show up as 10.1.0.10. Whenever it accesses subnet 2 of anything else, it should appear as 172.16.0.10.
I have a web server running and wish to get a mail server running on the same machine. I have a registered domain name. I have postfix and dovecot installed. I can send emails from the server to my normal address on a different domain but cannot receive mail. I can send and receive mail locally with no problems. I just don't know where to look for the problems. If you need any more info ( config files/doamin names etc let me know)
View 5 Replies View RelatedI am new to Linux but not UNIX, I have been an HPUX SA in a previous life and now Oracle DBA. So I installed F15 (Gnome) onto an intel machine using LIVE USB from website. Install has gone fine but I have no external network access. I have tried for a couple of days to get this working but no luck. I can ping internally on our LAN but no external connections. I cannot ping external web sites from my PC either so guess work have locked it down in the firewall but I can browse from my PC so was hoping to be able to use Firefox and YUm etc from my F15 install. Which sort of leads onto my second issue which is setting up a remote X client session, I was trying to install VNC with YUm when I found this issue.
Here is some info:
[root@hrdevdba1 etc]# cat resolv.conf
# Generated by NetworkManager
domain hayshps.com
search hayshps.com
nameserver 10.190.27.14
nameserver 10.190.13.1
nameserver 10.190.13.13
# NOTE: the libc resolver may not support more than 3 nameservers.
# The nameservers listed below may not be recognized.
nameserver 10.171.90.215
nameserver 10.175.151.236
[root@hrdevdba1 etc]# ifconfig .....
I should add that I have also attempted to disable IPv6.
I'm having a problem with a new install of postfix... it won't relay mail to external domains. Internal mail is fine.I'm using virtual_mailbox_domains so that I can have multiple domains, and I've set dovecot to use local files with encrypted passwords.Here's my main.cf
Code:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
[code]....
have a problem with my network-manager in ubuntu 10.10.when I dial one of my vpn connections, my other vpn connections be disabled and I can't use them!I tried to restart network-manager and gnome-panel, but it does't seem to solve this problem.
View 1 Replies View RelatedI just upgraded to 15 and was wondering if it was possible to specify which devices to prioritize a route through. I have my machine, a laptop, connected to my family's router for an internet connection and a wired connection to a personal router for a faster and private connection between my other two computers and a network storage device. Whenever the laptop is connected to my personal router everything goes through it and it can't connect to any external web sites. But when I unplug it and go only on my family's wireless everything is fine, except I can't connect to the storage device since it has no external connections.
View 11 Replies View Relatedmy ISP block port 25. So i enable the port 587 in my postfix but every time of external ISP try send email to me, it try send on port 25. How can i "tell" to every external postfix to send me on port 587 ? Exist some configuration on DNS to this ?
View 1 Replies View RelatedAlright, first Squeeze wouldn't create an initial RAM disk even with "--initrd" specified. Now I don't need one and it's creating one for me even though I don't want one! How do I stop this? I'm beginning to feel like I am using Windows in the sense that it's doing things on its own. Don't make me a RAM disk unless I say so!
View 10 Replies View Relatedi would like to prevent all users other than the user "parker" on my system from using the su or sudo commands. I have not attempted to modify the sudoers file so it just contains the standard root ALL = (ALL) ALL.
View 5 Replies View RelatedI have a PC that have a new Ethernet card that is not yet supported by Debian/Lenny.I downloaded the latests driver from the manufacturer and after a make;make install everything works like a charm.My problem is that one day after a probable update, Debian overrided my new driver by an other one causing my Ethernet card to shut down.After an other make install, everything work again like it should..But how do i do to prevent Debian to update my driver ?
View 1 Replies View RelatedHowto create usb-hdd using live-helper to prevent xfce desktop from any changes? Normal user shouldn't change any icon on the desktop.
View 8 Replies View RelatedHere is what i do: make clean make makefiles CCARGS='-DEF_CONFIG_DIR="/opt/product/postfix-2.6.5/etc"
-DEF_COMMAND_DIR="/opt/product/postfix-2.6.5"
-DEF_DAEMON_DIR="/opt/product/postfix-2.6.5/libexec"
-DEF_MAILQ_PATH="/opt/product/postfix-2.6.5/bin/mailq"
-DEF_DATA_DIR="/opt/product/postfix-2.6.5/lib"
-DEF_NEWALIAS_DIR="/opt/product/postfix-2.6.5/bin/newaliases"
[Code]...
make install then i got this error: postfix: fatal: chdir(/usr/libexec/postfix): No such file or directory make: *** [install] Error 1 I don't understand why it's checking the usr/libexec folder for the daemons although I've set the folder to /opt/product/postfix-2.6.5/libexec in the makefile. Here is also the cat of my makedefs.out:
[Code]....
I have been running an email server on a Red Hat 9 system for 5 years, and wanting to upgrade it to the latest Fedora OS. A few days ago it crashed. The server is running Fedora 11 (up-to-date). Clients are Fedora 11 and Windows XP machines using Thunderbird for accessing email. The server is running Postfix and Dovecot. Within my local network I can send and receive emails. I can also send email to addresses outside of my local network. The only problem is that I cannot receive any email from outside the local network. I cannot think of anything aside from my firewall (iptables) or postfix config that could be causing the problem.
Below are my iptables file, and the postfix main.cf changes that I have made.
Iptables (the same file I was using on Red Hat version 9 with one minor deprecated syntax changed):
*nat
:PREROUTING ACCEPT [22:1894]
:POSTROUTING ACCEPT [14:840]
:OUTPUT ACCEPT [17:1356]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
*filter .....
I am using postfix and dovecot installed in one machine running linux centos 5.4 and I have two lan card eth0 and eth1
the eth0 is my IP from ISP
the eth1 is my internal IP
Now since my postfix and dovecot are started without any errors what I mean is. I can able to send in yahoo,gmail,etc... and also i can recieve email from outside. My question is how can I restrict this email address prinzz@prinzz.com denied for outside but can send and recieve only in internal while this prinzz2@prinzz.com is allow to send and receive outside and inside.
i have configured postfix to deliver mail from an internal mail server to external domains... however i keep getting this errors
Code:
un 10 23:23:59 smtpserver postfix/local[28831]: 7800CF0058: to=<root@smtpserver.domain>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to mailbox)
Jun 10 23:23:59 smtpserver postfix/qmgr[5989]: 7800CF0058: removed
Jun 10 23:25:19 smtpserver postfix/smtpd[28824]: connect from unknown[192.168.5.22]
[code]....
We have the following server at collocation: [URL]
Provider's technicians were working for 3 hrs but finally were unable to set up hardware RAID1 on it.
What could prevent them from doing it? Is it difficult to set up RAID1? It is mentionned as basic function in specifications.
They said debian not booting after raid configured...
i'm currently using ubuntu 10.04 and wanted to update to 11.04 and that means backing up all sorts of data and configuration.Regarding the wireless configuration list, i have a few with password and auto connect, i wanted to know if there is a way of saving that listconfiguration other then manually.
View 3 Replies View RelatedI'm trying to prevent GDM/Gnome from turning the screen off prior to login. It's current behavior, under 3.14, slowly fades the screen out and then enters DPMS mode after 10 minutes.I have zeroed out the following dconf settings, under both root and user, but the default behavior persists.
org.gnome.desktop.session idle-delay
org.gnome.settings-daemon.plugins.power sleep-inactive-ac-timeout
org.gnome.settings-daemon.plugins.power sleep-inactive-battery-timeout
I have a ppp0 entry with post-up options like this
mapping ppp0
map none photon-plus motorola
map timeout: 12
## map init-time: 12 # for slow drivers
[code]...
If I comment those off then no such problem, hence some how ppp0 executed automatically and there is no [auto ppp0] any where. How can I stop this forcefully ?
I have ssh installed and running on my laptop(Debian Sequeeze). I can run "ssh localhost" without any problem. But for some reason I cannot connect to it from other computers. They all give "connection timed out". I can connect to these computers`s ssh servers but for some reason my laptop with Debian is not accepting any connections.
View 5 Replies View RelatedI want postfix to send me the root mail to an external account, but I never do it and I don't know how to do it, anyone can explain me how to do it?
View 1 Replies View RelatedI have a postfix server running on a virtual machine hosted by vpslink.com. I have followed the following configuration guide to install the system with dovecot, sasl smtpd authentication, and postfix as an mta: [URL](I know it says it's a debian configuration, but it seemed legitimate that I could follow it). Anyway, in sending email from my primary email account, I have found that roughly 1/2 of the messages are delivered, and 1/2 of them are rejected with a message similar to the following:
Quote:
[code].....
I'm running Postfix primarily as a local email server. There is no email coming in from other machines, and there are no other machines using it to send mail. But I'd like it to be able to send mail. I use Evolution for my normal email stuff, and it's configured to send mail to my ISP's smtp server, and that's working fine. But I occasionally send mail from the command line, using the "mail" or "mutt" utilities. (Mutt because the standard mail doesn't support attachments.) These don't use Evolution's configuration, they depend upon whatever is listening to port 25 - and that's Postfix. So all I should need to do is to give Postfix the smtp server, user name, and password. My problem is that Postfix has voluminous documentation online, and I haven't been able to find this simple configuration in it.
View 3 Replies View Related