<p dir="ltr">Tome, to máš vlastně pravdu. Díkes moc. Dojím oběd a jdu to vyzkoušet. </p>
<div class="gmail_quote">Dne 2. 10. 2015 3:18 PM napsal uživatel "Tomas Herceg" <<a href="mailto:tth@rfa.cz">tth@rfa.cz</a>>:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA256<br>
<br>
to prece neni prob naskriptovat, pouzit puppet, slatstack, ansible a<br>
ver mi ze tema mutli instancema si usetris spoustu nervu pri<br>
debugovani - i do logu si muzes dat isntancename ktera bude odpovidat<br>
IP a tudiz hned z logu uvidis co kam slo, navic ty ip tam budes muset<br>
taky nejak pridavat takze pridat dalsi instanci postfixu z nejaky<br>
template mi prijde jako banalita, pripadne si to muzes naskriptovat<br>
aby se ti to treba pri rebootu nebo z cronu generovalo samo podle<br>
aktualnich IP. Kazdopadne netvrdim ze to je jediny reseni ale je to<br>
vec kterou mam opravdu hodne vyzkousenou v praxi - 32 ip+postfix per<br>
VPS a zadnej problem.<br>
<br>
On 10/02/15 15:10, Jiří Medvěd wrote:<br>
> Tome, dikes. Ale je to trochu nepraktické z důvodu dalšího<br>
> přidávání IP.<br>
><br>
> Jirko, též dík. Podívám se na to, ale přijde mi to jako na<br>
> příchod. Potřebuji takto řešit pouze odchozí poštu.<br>
><br>
> Medvěd 🐻<br>
><br>
> Dne 2. 10. 2015 1:28 PM napsal uživatel "Jirka Bourek"<br>
> <<a href="mailto:vpsfree-list@keroub.cz">vpsfree-list@keroub.cz</a> <mailto:<a href="mailto:vpsfree-list@keroub.cz">vpsfree-list@keroub.cz</a>>>:<br>
><br>
> <a href="http://www.postfix.org/MULTI_INSTANCE_README.html" rel="noreferrer" target="_blank">http://www.postfix.org/MULTI_INSTANCE_README.html</a><br>
><br>
> Nebo, pokud máte Postfix 3.1, tak by možná šlo<br>
><br>
> <a href="http://www.postfix.org/SMTPD_POLICY_README.html" rel="noreferrer" target="_blank">http://www.postfix.org/SMTPD_POLICY_README.html</a><br>
><br>
> s tím, že si v <a href="http://master.cf" rel="noreferrer" target="_blank">master.cf</a> <<a href="http://master.cf" rel="noreferrer" target="_blank">http://master.cf</a>> vytvoříte služby<br>
> smtpd128 a smtpd129 naslouchající na odpovídajících IP adresách,<br>
> kde každá bude mít specifické smtpd_policy_service_policy_context,<br>
> podle kterého pak vaše policy_service pozná, na kterou IP spojení<br>
> přišlo - a podle toho vrátí správné "filter smtpXXX"<br>
><br>
> (Tohle vyzkoušené nemám, ale jít by to mohlo.)<br>
><br>
> Jiri Medved wrote:<br>
><br>
> Ahoj, potreboval bych pomoci s nastavenim postfixu pro odesilani<br>
> zprav.<br>
><br>
> # ip a 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc<br>
> pfifo_fast state UP qlen 1000 link/ether 50:e5:49:59:fe:a1 brd<br>
> ff:ff:ff:ff:ff:ff inet *MailScanner has detected a possible fraud<br>
> attempt from "77.75.77.1" claiming to be* *MailScanner warning:<br>
> numerical links are often malicious:* <a href="http://77.75.77.1/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 77.75.77.1/21</a><br>
> <<a href="http://77.75.77.1/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://77.75.77.1/21</a>> brd 77.75.77.255 scope global eth0 inet<br>
> *MailScanner has detected a possible fraud attempt from<br>
> "77.75.77.128" claiming to be* *MailScanner warning: numerical<br>
> links are often malicious:* <a href="http://77.75.77.128/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 77.75.77.128/21</a><br>
> <<a href="http://77.75.77.128/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://77.75.77.128/21</a>> scope global secondary eth0 inet<br>
> *MailScanner has detected a possible fraud attempt from<br>
> "77.75.77.129" claiming to be* *MailScanner warning: numerical<br>
> links are often malicious:* <a href="http://77.75.77.129/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 77.75.77.129/21</a><br>
> <<a href="http://77.75.77.129/21" rel="noreferrer" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://77.75.77.129/21</a>> scope global secondary eth0<br>
><br>
> # /etc/postfix/<a href="http://master.cf" rel="noreferrer" target="_blank">master.cf</a> <<a href="http://master.cf" rel="noreferrer" target="_blank">http://master.cf</a>> smtp128 unix - -<br>
> n - - smtp -o smtp_bind_address=77.75.77.128<br>
><br>
> smtp129 unix - - n - - smtp -o<br>
> smtp_bind_address=77.75.77.129<br>
><br>
> A potrebuji, kdyz pouziji "telnet 77.75.77.128 25", aby email<br>
> opravdu odesel z IP 77.75.77.128 a nikoliv se lokalne preposlal na<br>
> 77.75.77.1 a pak se odeslal to internetu z IP 77.75.77.1.<br>
><br>
> Dekuji moc za pomoc. Jiz v tom lezim od vcera.<br>
><br>
> Medved _______________________________________________<br>
> Community-list mailing list <a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a><br>
> <mailto:<a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a>><br>
> <a href="http://lists.vpsfree.cz/listinfo/community-list" rel="noreferrer" target="_blank">http://lists.vpsfree.cz/listinfo/community-list</a><br>
><br>
> _______________________________________________ Community-list<br>
> mailing list <a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a><br>
> <mailto:<a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a>><br>
> <a href="http://lists.vpsfree.cz/listinfo/community-list" rel="noreferrer" target="_blank">http://lists.vpsfree.cz/listinfo/community-list</a><br>
><br>
><br>
><br>
> _______________________________________________ Community-list<br>
> mailing list <a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a><br>
> <a href="http://lists.vpsfree.cz/listinfo/community-list" rel="noreferrer" target="_blank">http://lists.vpsfree.cz/listinfo/community-list</a><br>
><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2<br>
<br>
iQEcBAEBCAAGBQJWDoP9AAoJEKdOyZ9dW9NTGu4IAJOqUlT2PUZ2jXY7RY3dzdmZ<br>
mgSHgj6p8lTb8Th8BHkzv8rp75oq+CVR9oIqAFXspV0rEkwIud4XkNp7UMAaxakO<br>
bVaRhcfHGXY8QxC6o/24ttqGETyqfzY5Vsgm6rwN6VHjyi+c6d4/VDTCeO+CoiFm<br>
Wp4+2BZWzrua5fFFmINtMiWM5/lwokqRCLQ3hYVsuP82ykQtzzxQD6eDjsfdarx0<br>
YEMeq7KbbtOhdc2RP+kJGvBK9fZXXIDYkjklSASbvZCncavaNkzS3bZSBv2Csu94<br>
ThidDof05NB05Znaf7Lh+9D5kWZqoKMjeCULlHn9Kuv3RWP5C3J1RTCYvYngWz0=<br>
=NGKX<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
Community-list mailing list<br>
<a href="mailto:Community-list@lists.vpsfree.cz">Community-list@lists.vpsfree.cz</a><br>
<a href="http://lists.vpsfree.cz/listinfo/community-list" rel="noreferrer" target="_blank">http://lists.vpsfree.cz/listinfo/community-list</a><br>
</blockquote></div>