linux – 为什么我的Postfix充当开放邮件中继,我该如何阻止它？

概述我在CentOS 7中设置了Postifx / Dovecot / MariaDB的邮件服务器. 它以某种方式配置为开放中继. 你知道怎么阻止这个吗？ 配置文件如下： master.cf ## Postfix master process configuration file. For details on the format# of the file, see the master(5) 我在CentOS 7中设置了Postifx / Dovecot / MariaDB的邮件服务器.
它以某种方式配置为开放中继.
你知道怎么阻止这个吗？
配置文件如下：

master.cf

## Postfix master process configuration file.  For details on the format# of the file,see the master(5) manual page (command: "man 5 master").## Do not forget to execute "postfix reload" after editing this file.## ==========================================================================# service type  private unpriv  chroot  wakeup  maxproc command + args#               (yes)   (yes)   (yes)   (never) (100)# ==========================================================================smtp      inet  n       -       n       -       -       smtpd -o content_filter=spamassassin -v#smtp      inet  n       -       n       -       1       postscreen#smtpd     pass  -       -       n       -       -       smtpd#dnsblog   unix  -       -       n       -       0       dnsblog#tlsproxy  unix  -       -       n       -       0       tlsproxysubmission inet n       -       n       -       -       smtpd  -o syslog_name=postfix/submission  -o smtpd_tls_security_level=encrypt  -o smtpd_sasl_auth_enable=yes  -o smtpd_reject_unListed_recipIEnt=no#  -o smtpd_clIEnt_restrictions=$mua_clIEnt_restrictions#  -o smtpd_helo_restrictions=$mua_helo_restrictions#  -o smtpd_sender_restrictions=$mua_sender_restrictions  -o smtpd_recipIEnt_restrictions=permit_sasl_authenticated,reject  -o milter_macro_daemon_name=ORIGINATINGsmtps     inet  n       -       n       -       -       smtpd  -o syslog_name=postfix/smtps  -o smtpd_tls_wrappermode=yes  -o smtpd_sasl_auth_enable=yes  -o smtpd_reject_unListed_recipIEnt=no#  -o smtpd_clIEnt_restrictions=$mua_clIEnt_restrictions#  -o smtpd_helo_restrictions=$mua_helo_restrictions#  -o smtpd_sender_restrictions=$mua_sender_restrictions  -o smtpd_recipIEnt_restrictions=permit_sasl_authenticated,reject  -o milter_macro_daemon_name=ORIGINATING#628       inet  n       -       n       -       -       qmqpdpickup    unix  n       -       n       60      1       pickupcleanup   unix  n       -       n       -       0       cleanupqmgr      unix  n       -       n       300     1       qmgr#qmgr     unix  n       -       n       300     1       oqmgrtlsmgr    unix  -       -       n       1000?   1       tlsmgrrewrite   unix  -       -       n       -       -       trivial-rewritebounce    unix  -       -       n       -       0       bouncedefer     unix  -       -       n       -       0       bouncetrace     unix  -       -       n       -       0       bounceverify    unix  -       -       n       -       1       verifyflush     unix  n       -       n       1000?   0       flushproxymap  unix  -       -       n       -       -       proxymapproxywrite unix -       -       n       -       1       proxymapsmtp      unix  -       -       n       -       -       smtprelay     unix  -       -       n       -       -       smtp#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5showq     unix  n       -       n       -       -       showqerror     unix  -       -       n       -       -       errorretry     unix  -       -       n       -       -       errordiscard   unix  -       -       n       -       -       discardlocal     unix  -       n       n       -       -       local#virtual   unix  -       n       n       -       -       virtuallmtp      unix  -       -       n       -       -       lmtpanvil     unix  -       -       n       -       1       anvilscache    unix  -       -       n       -       1       scache## ====================================================================# Interfaces to non-Postfix software. Be sure to examine the manual# pages of the non-Postfix software to find out what options it wants.## Many of the following services use the Postfix pipe(8) delivery# agent.  See the pipe(8) man page for information about ${recipIEnt}# and other message envelope options.# ====================================================================## maildrop. See the Postfix MAILDROP_README file for details.# Also specify in main.cf: maildrop_destination_recipIEnt_limit=1##maildrop  unix  -       n       n       -       -       pipe#  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipIEnt}## ====================================================================## Recent Cyrus versions can use the existing "lmtp" master.cf entry.## Specify in cyrus.conf:#   lmtp    cmd="lmtpd -a" Listen="localhost:lmtp" proto=tcp4## Specify in main.cf one or more of the following:#  mailBox_transport = lmtp:inet:localhost#  virtual_transport = lmtp:inet:localhost## ====================================================================## Cyrus 2.1.5 (Amos Gouaux)# Also specify in main.cf: cyrus_destination_recipIEnt_limit=1##cyrus     unix  -       n       n       -       -       pipe#  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}## ====================================================================## old example of delivery via Cyrus.##old-cyrus unix  -       n       n       -       -       pipe#  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}## ====================================================================## See the Postfix UUCP_README file for configuration details.##uucp      unix  -       n       n       -       -       pipe#  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipIEnt)## ====================================================================## Other external delivery methods.##ifmail    unix  -       n       n       -       -       pipe#  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipIEnt)##bsmtp     unix  -       n       n       -       -       pipe#  flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipIEnt##scalemail-backend unix -       n       n       -       2       pipe#  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store#  ${nexthop} ${user} ${extension}##mailman   unix  -       n       n       -       -       pipe#  flags=FR user=List argv=/usr/lib/mailman/bin/postfix-to-mailman.py#  ${nexthop} ${user}dovecot   unix  -       n       n       -       -       pipe    flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipIEnt}spamassassin unix - n n - - pipe flags=R user=spamd argv=/usr/bin/spamc -e /usr/sbin/sendmail -oi -f ${sender} ${recipIEnt}

postconf -n

alias_database = hash:/etc/aliasesalias_maps = hash:/etc/aliasesappend_dot_mydomain = nobiff = nocommand_directory = /usr/sbinconfig_directory = /etc/postfixdaemon_directory = /usr/libexec/postfixdata_directory = /var/lib/postfixdeBUG_peer_level = 2deBUGger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_ID & sleep 5dovecot_destination_recipIEnt_limit = 1HTML_directory = noinet_interfaces = localhostinet_protocols = allmail_owner = postfixmailq_path = /usr/bin/mailq.postfixmanpage_directory = /usr/share/manmessage_size_limit = 26214400mydestination = $myhostname,localhost.$mydomain,localhostnewaliases_path = /usr/bin/newaliases.postfixqueue_directory = /var/spool/postfixreadme_directory = nosample_directory = /usr/share/doc/postfix-2.10.1/samplessendmail_path = /usr/sbin/sendmail.postfixsetgID_group = postdropsmtp_tls_session_cache_database = btree:${data_directory}/smtp_scachesmtpd_banner = $myhostname ESMTP $mail_name (CentOS)smtpd_recipIEnt_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destinationsmtpd_relay_restrictions = reject,reject_unauth_destinationsmtpd_sasl_path = private/authsmtpd_sasl_type = dovecotsmtpd_sender_restrictions = reject_unkNown_sender_domainsmtpd_tls_cert_file = /etc/pki/dovecot/certs/dovecot.pemsmtpd_tls_key_file = /etc/pki/dovecot/private/dovecot.pemsmtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scachesmtpd_use_tls = yesunkNown_local_recipIEnt_reject_code = 550virtual_alias_maps = MysqL:/etc/postfix/mariadb-valias.cfvirtual_mailBox_domains = MysqL:/etc/postfix/mariadb-vdomains.cfvirtual_mailBox_maps = MysqL:/etc/postfix/mariadb-vusers.cfvirtual_transport = dovecot

mail_version = 2.10.1

有人可以建议吗？

谢谢

解决方法 我的猜测是,那是你提交的服务,这是一个广泛开放的服务.我认为它目前允许任何人连接那里,只是发送电子邮件而不需要实际的身份验证.

或者,您的SASL配置会以某种方式搞砸,即使它不应该返回“OK,此用户可以进行身份​​验证”. (去过也做过)

总结

以上是内存溢出为你收集整理的linux – 为什么我的Postfix充当开放邮件中继,我该如何阻止它？全部内容，希望文章能够帮你解决linux – 为什么我的Postfix充当开放邮件中继,我该如何阻止它？所遇到的程序开发问题。

如果觉得内存溢出网站内容还不错，欢迎将内存溢出网站推荐给程序员好友。