Plesk 9.3 Postfix Secure Configuration

[Nikos Ioakeim]

Hi to All!,
recently i decided to check out the postfix mta due to some strange problems with qmail.

As a new user to postfix, i am trying to figure out a way to secure my email server. Since i installed postfix i saw my forged emails from my domain, which of course were all spam, and i realized that postfix is not by default secure as qmail.

First of all i disabled the VRFY command, which helps spammers identify the internal users of the system.

Now i want to do some of the following things but i find the master.cf and main.cf files too messed up and i am very sceptical on editing without being sure what i am doing, and this is the very reason of this post.

1. I want port 25 to be as secure as possible. RBL checks, user authentication with tls option, dns checks for forged users and servers.

2. I want port 587 to be a submission port, so that only authenticated users can access it and sent emails. (Local Users)

Does anyone have done this before? I would realy use some insight if possible.

Thanks in advance

 

[sthomas]

I'd also like to know how this can be achieved?

I'm assuming 587 can only be used via authenticated users?