Trusted Network / Email Relay

[thorsten]

NethServer Version: 7.5
Module: email

I want some internal machines to send emails via Nethserver. I somehow feel that
“Allow relay from trusted networks” is not enough, it seems that I do need to allow relay for individuals IPs.

My question:
At what criteria does Nethserver consider an applicant as “within the trusted networks”?

Is it necesssary that:

• the machines has an IP within “green”, in my case 192.168.1.x
• the machines IP is assigned by Nethserver DHCP
• the machines IP is set as a reserved IP, regardless if assigend manually or by DHCP
• to assign some wildcard for SMTP access > Allow relay from IP addresses, such as 192.168.0.255 (…0) does not work

Thank you
Thorsten

[planet_jeroen (Jeroen Visser)]

Heya,

@thorsten

Is it necesssary that:

• the machines has an IP within “green”, in my case 192.168.1.x

No, but you do need to define the network it IS on, as trusted:

Given these settings, all computers residing on 10.0.0.0/24 or 192.168.50.0/24 will be able to use the mailserver as relay.

@thorsten

the machines IP is assigned by Nethserver DHCP

No. But this IS adviced due to how dnsmasq works afaik. If you need your clients to be browseable by hostname, this is required I think.

@thorsten

the machines IP is set as a reserved IP, regardless if assigend manually or by DHCP

Only if it overlaps your DHCP scope, and it might be a way to work around previous issue.

@thorsten

to assign some wildcard for SMTP access > Allow relay from IP addresses, such as 192.168.0.255 (…0) does not work

This is done through trusted networks, unless I missunderstand the last question.

[thorsten]

perfect for my understandstanding.