strange problem ...very important for me

Hello,

I am new at this group so if I wrote sth wrong please correct me.
I have read what I can got, no result.

I am using Postfix with Cyrus SASL (and Amavis).

Problem is very important for me because it can be used to send SPAM (i
hate it). When I am away from LAN - I am able to send email:
user1@my.domain
to
user2@my.domain
without SASL autorization.

What is wrong ? it is bug or misconfiguration ?

smtp_sasl_security_options = noplaintext, noanonymous,nodictionary
,mutual_auth
mynetworks = 127.0.0.0/8 192.168.0.0/23
mydestination = $mydomain, $myhostname
myorigin = $myhostname
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_rbl_client relays.ordb.org,
check_client_access hash:/etc/postfix/client_access,
# ^^^^^^^^^^ there are only few several adresses.
reject_unknown_recipient_domain,
reject_unauth_destination,
reject_rbl_client opm.blitzed.org
reject_rbl_client list.dsbl.org
reject_rbl_client sbl.spamhaus.org
reject_rbl_client cbl.abuseat.org
reject_rbl_client dul.dnsbl.sorbs.net

smtpd_client_restrictions =
smtpd_sender_restrictions = check_client_access
hash:/etc/postfix/client_access,
^^^^^^^^^^ there are only few several adresses.
smtp_sasl_security_options = noplaintext, noanonymous

if something more is needed please let me know.

#######
i think that:
mynetworks = 127.0.0.0/8 192.168.0.0/23
smtpd_recipient_restrictions = permit_mynetworks, ...
is problem - but then - it is possible to run amavis ? amavis can't
authorize itself - isn't it ?

--
Martin.

> Hello,
>
> I am new at this group so if I wrote sth wrong please correct me.
> I have read what I can got, no result.
>
> I am using Postfix with Cyrus SASL (and Amavis).
>
> Problem is very important for me because it can be used to send SPAM (i
> hate it). When I am away from LAN - I am able to send email:
> user1@my.domain
> to
> user2@my.domain
> without SASL autorization.
>
> What is wrong ? it is bug or misconfiguration ?
[...]

Do you need an authentication, if you wanna send an email to anybody? I
don't mind! Postfix is responsable for the domain you've configured - so
it just the deliveres the mail to the recipient. That's *NOT* relaying!
Relaying would be if you'd able to send and email *from* outside *to* an
outside email-account (for which postfix is not responsible for) without
beeing authenticated.

Or did I get you wrong completely?