[BlueOnyx:26523] Re: Postfix: Allow relay access by IP (and hostname)

Michael Stauber mstauber at blueonyx.it
Tue Sep 26 12:11:29 -05 2023


Hi Chad,

> I missed this email last night, but apparently this morning at 6am when 
> the RPMs came in, it started working, automagically.  I know this 
> because the backlog of outgoing emails from things that hadn't been 
> working then triggered rate alerts from my upstream provider.  In the 
> intervening time when emails weren't getting relayed, apparently the 
> attempts and retries, etc. had accumulated in the database and there 
> were upwards of 100,000 emails that would have been headed outbound. 

Yikes! That was quite a flood indeed!

> I'm assuming, from the implementation and what I found in the mynetworks 
> entry, it will take pretty much anything listed in the Relay field from 
> the UI and put it directly in.

That is correct. Anything that is listed in the relay field is allowed 
to relay through your MTA without further checks.

> That would allow the use of a CIDR netmask to be part of the entry 
 > and then be passed directly into the Postfix config in that same
 > manner.

Correct. You can put in something like 192.168.0.0 and then the whole 
192.168.0.0/16 network is allowed to relay through your server.

-- 
With best regards

Michael Stauber




More information about the Blueonyx mailing list