Postfix behind NAT / Real IP

Discussion in 'Server Operation' started by akunz, Aug 9, 2009.

  1. akunz

    akunz New Member

    Hello Community,

    i have a problem with my Postfix setup. The Postfix Server is connected to my local network, with a private address 10.0.0.10. On my gateway Server i use a iptables DNAT rule for Port 25. Everything works fine, but i can not see the Source IPs in the Postfix Logfile. So it looks like all emails come from the internal gateway server with the address 10.0.0.1.

    What is the best Setup for an internal Postfix Server behind a Firewall wich have no public address? I will see the real client addresses in my Postfix log. (and for fight spam)

    Thanks for your help.

    Kind regards

    Alexander
     
    Last edited: Aug 9, 2009
  2. av1611

    av1611 New Member

    Make sure this is in /etc/postfix/main.cf:

    smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_invalid_hostname,
    reject_unknown_recipient_domain,
    reject_pipelining,
    reject_unauth_destination,
    reject_rbl_client zen.spamhaus.org,
    permit

    there are many rbl clients but I think this is adequate for most of what I deal with.

    If I get a particularly bothersome spammer, I block his IP block at the firewall/gateway.
     

Share This Page