[BlueOnyx:26523] Re: Postfix: Allow relay access by IP (and hostname)
Michael Stauber
mstauber at blueonyx.it
Tue Sep 26 12:11:29 -05 2023
Hi Chad,
> I missed this email last night, but apparently this morning at 6am when
> the RPMs came in, it started working, automagically. I know this
> because the backlog of outgoing emails from things that hadn't been
> working then triggered rate alerts from my upstream provider. In the
> intervening time when emails weren't getting relayed, apparently the
> attempts and retries, etc. had accumulated in the database and there
> were upwards of 100,000 emails that would have been headed outbound.
Yikes! That was quite a flood indeed!
> I'm assuming, from the implementation and what I found in the mynetworks
> entry, it will take pretty much anything listed in the Relay field from
> the UI and put it directly in.
That is correct. Anything that is listed in the relay field is allowed
to relay through your MTA without further checks.
> That would allow the use of a CIDR netmask to be part of the entry
> and then be passed directly into the Postfix config in that same
> manner.
Correct. You can put in something like 192.168.0.0 and then the whole
192.168.0.0/16 network is allowed to relay through your server.
--
With best regards
Michael Stauber
More information about the Blueonyx
mailing list