{"description": "Postfix's mail relay controls are implemented with the help of the\nsmtpd recipient restrictions option, which controls the restrictions placed on\nthe SMTP dialogue once the sender and recipient envelope addresses are known.\nThe guidance in the following sections should be applied to all systems. If\nthere are systems which must be allowed to relay mail, but which cannot be\ntrusted to relay unconditionally, configure SMTP AUTH with SSL support.", "warnings": [], "requires": [], "conflicts": [], "values": {}, "groups": ["postfix_server_mail_smtpd_recipient_restrictions", "postfix_server_mail_smtpd_relay_restrictions", "postfix_server_relay_require_tls", "postfix_server_relay_set_trusted", "postfix_server_relay_smtp_auth_for_untrusted"], "rules": ["postfix_prevent_unrestricted_relay"], "platform": "", "platforms": [], "inherited_platforms": ["package[postfix]", "system_with_kernel"], "cpe_platform_names": [], "title": "Control Mail Relaying", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/mail/postfix_harden_os/postfix_server_cfg/postfix_server_relay/group.yml"}