Google Outbound Services Configuration Guide - Manual (Page 124)

134 Outbound Services Configuration Guide
Set Up Reinjection
Before you can register your IP addresses in the Administrative Console or set up
a smarthost, you must allow reinjection. For an overview of reinjection concepts,
see “Set Up Reinjection” on page 14.
Configure Outbound Services IP ranges to be a trusted relay using qmail +
tcpserver
1. Edit /etc/tcp.smtp to allow each of Outbound Services IP ranges to relay:
IP Range:allow,RELAYCLIENT="":allow
where IP Range is the appropriate IP Range. For a list of IP ranges, see “IP
Ranges” on page 13.
2. Run tcprules to reload allowed hosts:
> cd /etc
> tcprules tcp.smtp.cdb tcp.smtp.temp < tcp.smtp
3. Verify that the tcp.smtp.cdb file is invoked in the mail server's startup script.
4. Restart tcpserver so that the new rules will take effect:
> /usr/local/bin/tcpserver -x/etc/tcp.smtp.cdb -R -H -c25 -u502
-g501 mailhost.domain.com smtp /var/qmail/bin/qmail-smtpd 2>&1
[UID '502' & GID '501' may be different depending on server
configuration.]
Configure Outbound Services IP ranges to be a trusted relay using qmail + inetd
+ tcpd
If the qmail line in the inetd.conf file is similar to this:
smtp stream tcp nowait qmaild /usr/sbin/tcpd /var/qmail/bin/tcp-env
/var/qmail/bin/qmail-smtpd
then use the following steps instead
1. Edit /etc/hosts.allow to include the Postini IP ranges and trusted servers.
For a list of IP ranges, see “IP Ranges” on page 13.
2. Disallow everything else.
Register Your IP in the Administration Console
After you have set up reinjection, register the IP address of your outbound mail
server in the Administration Console. Do not change your smarthost until your IP
address is registered in Outbound Servers.
For instructions on how to register your IP in the Administration Console, see
“Register Your IP in the Administration Console” on page 15.