質問編集履歴
1
不要な情報の削除、タイトルの工夫
test
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
Postfixの
|
|
1
|
+
Postfixのログに現れる 554 5.7.1 You are not allowed to connect について
|
test
CHANGED
|
@@ -64,56 +64,6 @@
|
|
|
64
64
|
|
|
65
65
|
|
|
66
66
|
|
|
67
|
-
### 試したこと
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
(0) 11行目の xxx.xxx.xxx.xxx というIPアドレスが怪しいですが、接続回ごとに変わります。⇒ 打つ手なし
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
(1) Postfixのmain.cfに下記を追加 ⇒ 遮断効果なし
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
smtpd_helo_required = yes
|
|
80
|
-
|
|
81
|
-
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
|
|
82
|
-
|
|
83
|
-
smtpd_helo_restrictions = reject_unknown_hostname
|
|
84
|
-
|
|
85
|
-
smtpd_sender_restrictions = reject_unknown_sender_domain
|
|
86
|
-
|
|
87
|
-
smtpd_client_restrictions = permit_mynetworks, reject
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
(2) iptables で下記を追加 ⇒ 遮断効果なし
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
iptables -A OUTPUT -d 127.0.0.1 -p tcp -m tcp --dport 25 -j ACCEPT
|
|
98
|
-
|
|
99
|
-
iptables -A OUTPUT -p tcp -m tcp --dport 25 -m owner --gid-owner postfix -j ACCEPT
|
|
100
|
-
|
|
101
|
-
iptables -A OUTPUT -p tcp -m tcp --dport 25 -m owner --uid-owner root -j ACCEPT
|
|
102
|
-
|
|
103
|
-
iptables -A OUTPUT -p tcp -m tcp --dport 25 -m owner --uid-owner postfix -j ACCEPT
|
|
104
|
-
|
|
105
|
-
iptables -A OUTPUT -p tcp -m tcp --dport 25 -m owner --uid-owner apache -j ACCEPT
|
|
106
|
-
|
|
107
|
-
iptables -A OUTPUT -p tcp -m tcp --dport 25 -j REJECT --reject-with icmp-port-unreachable
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
(3) iptables で25番ポートを閉じる ⇒ メールの転送が来なくなってしまったのでNG
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
67
|
|
|
118
68
|
|
|
119
69
|
|
|
@@ -157,31 +107,3 @@
|
|
|
157
107
|
CentOS release 6.9
|
|
158
108
|
|
|
159
109
|
Postfix version 2.6.6
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
不正中継リレーチェックは合格済み
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
$iptables -Lでは、
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
|
|
172
|
-
|
|
173
|
-
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
postfixのmain.cfでは、
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
inet_interfaces = all
|
|
182
|
-
|
|
183
|
-
mydestination = $myhostname, localhost.$mydomain, localhost
|
|
184
|
-
|
|
185
|
-
mynetworks_style = host
|
|
186
|
-
|
|
187
|
-
smtpd_helo_required = yes
|