Поднята звязка Postfix+Echange 2003,почта нормально ходит в обе стороны! Есть несколько почтовых адресов которыми люди пользуются извне.
Раньше на Exch были проброшены порты с фаера, и юзеры работали непосредственно с мелкомягким! Посоветуйте каким методом правильней организовать им доступ к своим ящикам? Пускать в мир веб морду Exch не хотелось бы по понятныи причинам!
Код: Выделить всё
OS FreeBSD 8.0
Postfix 2.6.5Код: Выделить всё
soft_bounce = no
queue_directory = /var/spool/postfix
command_directory = /usr/local/sbin
base = /usr/local/etc/postfix
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
mail_owner = postfix
default_privs = nobody
myhostname = domain.example.com
mydomain = example.com
myorigin = $mydomain
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, domain.example.com, domain2.example.com, domain3.example.com, domain4.example.com
#local_recipient_maps = proxy:unix:passwd.byname $alias_maps
local_recipient_maps =
unknown_local_recipient_reject_code = 550
mynetworks_style = host
mynetworks = 192.168.1.5, 127.0.0.0/8
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
header_checks = regexp:$base/header_checks
helo_checks = pcre:$config_directory/rule/helo_checks
mime_header_checks = regexp:$config_directory/rule/mime_header_checks
#body_checks = pcre:$config_directory/rule/body_checks
smtpd_banner = $myhostname ESMTP
debug_peer_level = 1
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
ddd $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/local/sbin/sendmail
newaliases_path = /usr/local/bin/newaliases
mailq_path = /usr/local/bin/mailq
setgid_group = maildrop
html_directory = /usr/local/share/doc/postfix
manpage_directory = /usr/local/man
sample_directory = /usr/local/etc/postfix
readme_directory = /usr/local/share/doc/postfix
virtual_transport = hash:$base/transport
transport_maps = hash:$base/transport
smtpd_client_restrictions = permit_mynetworks,
check_sender_access hash:$base/access,
reject_unknown_client_hostname,
permit
smtpd_helo_restrictions = permit_mynetworks,
check_sender_access hash:$base/access,
check_helo_mx_access cidr:$config_directory/rule/mx_access,
check_helo_access regexp:$config_directory/rule/relaying_stoplist,
check_client_access regexp:$base/rule/regexp_client,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
reject_unknown_helo_hostname,
permit
smtpd_sender_restrictions = permit_mynetworks,
check_sender_access hash:$base/access
check_recipient_access hash:$base/recipients
check_sender_mx_access cidr:$config_directory/rule/mx_access
check_helo_access regexp:$config_directory/rule/relaying_stoplist,
check_client_access regexp:$base/rule/regexp_client,
reject_unknown_sender_domain,
reject_unlisted_sender,
reject_unverified_sender,
reject_rbl_client bl.spamcop.net,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client dul.ru,
reject_rbl_client zen.spamhaus.org,
permit
smtpd_recipient_restrictions = permit_mynetworks,
check_sender_access hash:$base/access
reject_unauth_destination,
check_client_access regexp:$base/rule/regexp_client,
check_sender_mx_access cidr:$config_directory/rule/mx_access,
check_helo_access regexp:$config_directory/rule/relaying_stoplist,
reject_unlisted_recipient,
reject_unknown_recipient_domain,
reject_non_fqdn_recipient,
reject_unverified_recipient,
reject_rbl_client bl.spamcop.net,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client dul.ru,
reject_rbl_client zen.spamhaus.org,
check_recipient_access hash:$base/roleaccount_exceptions,
permit
smtpd_data_restrictions = permit_mynetworks,
reject_unauth_pipelining
smtpd_etrn_restrictions = reject
smtpd_delay_reject = yes
smtpd_reject_unlisted_sender = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
show_user_unknown_table_name = no
address_verify_sender = <>
unverified_sender_reject_code = 550
smtpd_helo_required = yes
smtp_always_send_ehlo = yes
smtpd_hard_error_limit = 3