Re: Postfix as honeypot - some Qs

On Mon, 9 Feb 2004, Stef Mit wrote:

> I know - trust me - I do not want to relay any email, except for what I
> will be controlling - thus having enabled defer_transports = smtp

This is not a safe setting, deferred_transports are delivered when the
queue is flushed.

Use the "HOLD" feature to put all mail on hold. This is safe and *much*
more efficient, since held mail is not scanned on every queue run.

> I am having problems in getting mynetworks and smtpd_etrn_restrictions
> right, to achieve this, e.g. I am not sure how to set the mynetworks for
> everybody (0.0.0.0/0 does not seem to work?!?), while being afraid that
> whatever I come up with, will be damaging with smtpd_etrn_restrictions =
> permit_mynetworks, reject ... any ideas?!?

Why do you need a honeypot? Spammers don't use open relays much anymore.
Trojaned proxies are much more effective. If you are new to Postfix, you
may be too inexperienced to operate the honeypot, and again the need for
such a thing is rather questionable.

--
Viktor.