Postfix Mail Problemi

[root@asd]# postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
body_checks = regexp:/etc/postfix/body_checks
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 10
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = /usr/share/doc/postfix-2.5.1-documentation/html
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname
mydomain = domain.com
myhostname = mail.domain.com
mynetworks = 127.0.0.0/8
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.5.1-documentation/readme
recipient_bcc_maps = mysql:/etc/postfix/mysql-recipient-bcc-maps.cf
sample_directory = /etc/postfix
sender_bcc_maps = mysql:/etc/postfix/mysql-sender-bcc-maps.cf
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = Merhaba
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = permit_sasl_authenticated permit_mynetworks reject_non_fqdn_sender reject_unknown_sender_domain reject_unauth_pipelining permit
syslog_facility = local5
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-aliases.cf
virtual_gid_maps = static:506
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql-domains.cf
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql-limit.cf
virtual_mailbox_limit_override = yes
virtual_mailbox_maps = mysql:/etc/postfix/mysql-users.cf
virtual_maildir_limit_message = Uzgunuz, kullanici posta kutusunun kotasi dolu.
virtual_uid_maps = static:506

Postfix mail server ile yukarıdaki config ile telnet ten bağlanıp aynı domain kullanıcılarına Authantication olmadan mail atmaya çalışanları
engelliyorum,

220 Merhaba
ehlo host
250-mail.domain.com
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from: admin@domain.com
250 2.1.0 Ok
rcpt to: admin@domain.com
554 5.7.1 <admin@domain.com>: Recipient address rejected: Access denied

fakat bu sefer hotmail veya gmail vb. domain lerden mail alamaz hale geliyorum, yani postfix reject ediyor gelen mail leri,

connect from col0-omc3-s7.col0.hotmail.com[65.55.34.145]
NOQUEUE: reject: RCPT from col0-omc3-s7.col0.hotmail.com[65.55.34.145]: 554 5.7.1 <admin@domain.com>: Recipient address rejected: Access denied; from=<deneme@hotmail.com> to=<admin@domain.com> proto=ESMTP helo=<col0-omc3-s7.col0.hotmail.com>
disconnect from col0-omc3-s7.col0.hotmail.com[65.55.34.145]

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject

, yukarıdaki tanımı silip default değeri aldırırsam hotmail
ve gmail den mail alabiliyorum ama bu sefer telnet ten bağlanan biri authentication olmadan aynı domain deki kullanıcılara kolaylıkla mail atabiliyor.

220 Merhaba
ehlo host
250-mail.domain.com
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from: admin@domain.com
250 2.1.0 Ok
rcpt to: admin@domain.com
250 2.1.5 Ok

Ben hem Telnet i güvenli hale getirmek hemde dışarıdan mail almak istiyorum, çok araştırdım ama malesef pek bir şey bulamadım, bilgisi olan birisi varsa lütfen yardımcı olsun.

Teşekkürler,

Benzer içerikler