OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
How to match SASL logged user and MAIL FROM address.

From: Truong Tan Son (sonttfcv.fujitsu.com)
Date: Wed Jun 01 2005 - 21:18:26 CDT


Dear Sir,

I install postfix 2.3, SASL 2.1 on RedHat Linux 7.3, the SMTP authentication seems good.

I use Microsoft Outllok Express 6.0 connect to this server to test.

This server did not check the match between user of SASL logged in and MAIL FROM address.

**SASL user:
     user1test.com & password

**MAIL FROM address owner:
          user1test.com
          user2test.com
          user3test.com

With user1test.com & password, I can send mail with MAIL FROM: user2test.com, or user3test.com,
NOT only for user1test.com

There is some options for SASL authen:

smtpd_sasl_auth_enable = yes
smtp_sasl_auth_enable = no
smtpd_sasl_authenticated_header = yes
smtpd_sender_login_maps = hash:/etc/postfix/login_maps
smtpd_sender_restrictions = reject_unlisted_sender
        permit_sasl_authenticated
        reject_sender_login_mismatch
        reject_unauthenticated_sender_login_mismatch
        reject

Does it lack something on this config ?

Please help me to solve this problem.

Thanks you and best regards,
----
Truong Tan Son