-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE7sBxPmxNSLEwQp4k5k1h0mWW9oAFAmJZtVMACgkQ5k1h0mWW
9oBajQgAtaPBGU8C0BoMi9eCR31hGfkDlFzrVfttHbU9kbGQMFg4Hy3RUTwb/PfP
xK39g6bvfz8Wzhsuc4R55tLGYwDJ5iT6JiT9biaAhYq6EdRv4UYhnfV+a+j0hp8W
PYRD3zNgrzgZfy0oYGhAP6ZB4G3rvl2wFF0hvARKUa7pqHJGlM1JHWAFZQbpG3PF
36gOOh3eEeADuYfmqFE8c/XpHD94zulLslXBMbyfi0WpzTY98d9oxdOerFJeXyV2
jL6UjhkLd+8jndGA5dKOwL5dB/KdL+nTvrzLUxSEdj0n512fg0xBcQMru0KiA6XR
niR8HUIQ+mHThVJYoO/ietR6NQZw4g==
=+lD+
-----END PGP SIGNATURE-----
> 15. apr. 2022 kl. 19:56 skrev alejandro@rogue-research.com:
>
> Greetings everyone,
> First time posting here and so bear with me please :)
> I have a mail server I don't want to touch; I want to set up another machine in front of it running spamd.
> I have tried using `rdr-to` instead of `divert-to` but neither seem to work
> This is what my pf rules look like in "/etc/pf.conf"
> ```
> table <spamd-white> persist
> table <nospamd> persist file "/etc/mail/nospamd"
>
> # Incoming connections that are whitelisted/nospamd go directly to the smtp server
> pass in quick log (all, to pflog0) on egress proto tcp from { <nospamd> <spamd-white> } \
> to any port smtp divert-to mailserver.domain.com port smtp
No. Please read the man page. You do not need divert-to here. If you do need it, your network design is wrong.
Try looking up http://home.nuug.no/~peter/pftutorial/#52 <http://home.nuug.no/~peter/pftutorial/#52> (or better yet for me, buy the book :))
All the best,
Peter
—
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
No comments:
Post a Comment