Hello Community, i have a problem with my Postfix setup. The Postfix Server is connected to my local network, with a private address 10.0.0.10. On my gateway Server i use a iptables DNAT rule for Port 25. Everything works fine, but i can not see the Source IPs in the Postfix Logfile. So it looks like all emails come from the internal gateway server with the address 10.0.0.1. What is the best Setup for an internal Postfix Server behind a Firewall wich have no public address? I will see the real client addresses in my Postfix log. (and for fight spam) Thanks for your help. Kind regards Alexander
Make sure this is in /etc/postfix/main.cf: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_unknown_recipient_domain, reject_pipelining, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, permit there are many rbl clients but I think this is adequate for most of what I deal with. If I get a particularly bothersome spammer, I block his IP block at the firewall/gateway.