Qpsmtpd:relay
SYNOPSIS
relay - control whether relaying is permitted
DESCRIPTION
relay - check the following places to see if relaying is allowed:
$ENV{RELAYCLIENT}
config/norelayclients, config/relayclients, config/morerelayclients
The search order is as shown and cascades until a match is found or the list is exhausted.
Note that norelayclients is the first file checked. A match there will override matches in the subsequent files.
CONFIG
Enable this plugin by adding it to config/plugins above the rcpt_* plugins
# other plugins... relay # rcpt_* go here
relayclients
A list of IP addresses that are permitted to relay mail through this server.
Each line in relayclients is one of: - a full IP address
- partial IP address terminated by a dot or colon for matching whole networks
192.168.42.
2001:db8:e431:ae06:
...
- a network/mask, aka a CIDR block
10.1.0.0/24
2001:db8:e431:ae06::/64
...
morerelayclients
Additional IP addresses that are permitted to relay. The syntax of the config file is identical to relayclients except that CIDR (net/mask) entries are not supported. If you have many (>50) IPs allowed to relay, most should likely be listed in morerelayclients where lookups are faster.
norelayclients
norelayclients allows specific clients, such as a mail gateway, to be denied relaying, even though they would be allowed by relayclients. This is most useful when a block of IPs is allowed in relayclients, but several IPs need to be excluded.
The file format is the same as morerelayclients.
RELAY ONLY
The relay only option restricts connections to only clients that have relay permission. All other connections are denied during the RCPT phase of the SMTP conversation.
This option is useful when a server is used as the smart relay host for internal users and external/authenticated users, but should not be considered a normal inbound MX server.
It should be configured to be run before other RCPT hooks! Only clients that have authenticated or are listed in the relayclient file will be allowed to send mail.
To enable relay only mode, set the only option to any true value in config/plugins as shown:
relay only 1
AUTHOR
2012 - Matt Simerson - Merged check_relay, check_norelay, and relayonly
2006 - relay_only - John Peackock
2005 - check_norelay - Copyright Gordon Rowell <gordonr@gormand.com.au>
2002 - check_relay - Ask Bjorn Hansen
LICENSE
This software is free software and may be distributed under the same terms as qpsmtpd itself.
