postfix邮件服务：远程发送及访问控制

1.远程主机发送邮件
[root@foundation19 Desktop]# telnet 172.25.254.119 25
Trying 172.25.254.119…
Connected to 172.25.254.119.
Escape character is ‘^]’.
220 westos-mail.westos.com ESMTP Postfix
ehlo hello ##测试命令是否可识别
250-westos-mail.westos.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:root@westos.com ##从root@westos.com发送
250 2.1.0 Ok
rcpt to:admin@qq.com ##发给admin@qq.com
250 2.1.5 Ok
data
354 End data with .
12qwaszx34erdfcv56tyghbn ##邮件内容
.
250 2.0.0 Ok: queued as 53E16EAC28

2.邮件客户端访问控制
[root@westos-mail ~]# postconf -e “smtpd_client_restrictions = check_client_access hash:/etc/postfix/access” ##配置smtpd_client_restrictions参数； 引号中的参数表示限制access文件中记录的用户访问 ； postconf -d | grep client执行该命令可找到该语句。
[root@westos-mail ~]# vim /etc/postfix/access ##被限制的用户ip记录在该文件中
172.25.254.219 REJECT ##限制172.25.254.219访问
[root@westos-mail ~]# postmap /etc/postfix/access ##将该明文文件加密
[root@westos-mail ~]# systemctl restart postfix.service
测试
[root@qq-mail ~]# telnet 172.25.254.119 25 ##远程访问
Trying 172.25.254.119…
Connected to 172.25.254.119.
Escape character is ‘^]’.
220 westos-mail.westos.com ESMTP Postfix
ehlo hello ##链接成功
250-westos-mail.westos.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from: root@westos.com ##设置邮件发送端
250 2.1.0 Ok
rcpt to: root@qq.com ##设置接受端
554 5.7.1 Client host rejected: Access denied ##访问受限