Skip to Content
  • +31 653-919-302
Cafayate.Net
  • 0
  • 0
  • Sign in
  • Nederlands English (US) Español (AR)
  • Contact Us
  • Home
  • Blog
  • Jobs
  • Contact us
Cafayate.Net
  • 0
  • 0
    • Home
    • Blog
    • Jobs
    • Contact us
  • +31 653-919-302
  • Nederlands English (US) Español (AR)
  • Sign in
  • Contact Us

Hardening guide for Postfix 2.x

  • All Blogs
  • Tech Blog
  • Hardening guide for Postfix 2.x
  • March 5, 2021 by
    Administrator

     

    Make sure the Postfix is running with non-root account:

    ps aux | grep postfix | grep -v '^root'
    

    Change permissions and ownership on the destinations below:

    chmod 755 /etc/postfix
    chmod 644 /etc/postfix/*.cf
    chmod 755 /etc/postfix/postfix-script*
    chmod 755 /var/spool/postfix
    chown root:root /var/log/mail*
    chmod 600 /var/log/mail*
    

    Edit using nano or vi, the file /etc/postfix/main.cf and add make the following changes: Modify the myhostname value to correspond to the external fully qualified domain name (FQDN) of the Postfix server, for example:

    myhostname = myserver.example.com
    

    Configure network interface addresses that the Postfix service should listen on, for example:

    inet_interfaces = 192.168.1.1
    

    Configure Trusted Networks, for example:

    mynetworks = 10.0.0.0/16, 192.168.1.0/24, 127.0.0.1
    

    Configure the SMTP server to masquerade outgoing emails as coming from your DNS domain, for example:

    myorigin = example.com
    

    Configure the SMTP domain destination, for example:

    mydomain = example.com
    

    Configure to which SMTP domains to relay messages to, for example:

    relay_domains = example.com
    

    Configure SMTP Greeting Banner:

    smtpd_banner = $myhostname
    

    Limit Denial of Service Attacks:

    default_process_limit = 100
    smtpd_client_connection_count_limit = 10
    smtpd_client_connection_rate_limit = 30
    queue_minfree = 20971520
    header_size_limit = 51200
    message_size_limit = 10485760
    smtpd_recipient_limit = 100
    

    Restart the Postfix daemon:

    service postfix restart
    
    
    in Tech Blog
    Nginx – Virtualmin – Odoo – configuration SSL

    Designed for companies

    We are a team of passionate people whose goal is to improve everyone's life through disruptive products. We build great products to solve your business problems. Our products are designed for small to medium size companies willing to optimize their performance.

    Get in touch

    Plantexel
    Pedernera
    Salta Capital 
    Argenina

    • +31 653-919-302
    • [email protected]
    Follow us
    Copyright © Plantexel
    Nederlands | English (US) | Español (AR)