I would like to host mail services for some domains. I have succesfully setup postfix to consult sql for those virtual domains. What I would like to do is:
For connections on 25: 1. Deny relaying (only deliver to recipients of my virtual domains) 2. Leave tls optional, but offer auth only if client does tls 3. Accept only non-blacklisted clients (e.g restrict XBL+SBL+PBL from spamhaus) or clients that do tls and auth ("friend mail servers" that are setup to authenticate with me with auth and tls)
For connections on 587: 1. Enforce tls and auth 2. Permit relaying. 3. Accept only non-blacklisted clients (blacklists like above but leave out PBL checking)
A.I know of the postfix options for the above , but I cant find how to differentiate them based on the listening port.
B.Will I run into widely known problems with supposedly legit clients with the above policy?
I am new to mail server setup, sorry for any meaningless question/assupmtion (please point it). Thanks.