From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sun Oct 09 2005 - 17:04:54 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Am Sunday 09 October 2005 19:36 schrieb Stephen Satchell:

> Does any mechanism exist during SMTP AUTH to reject authencation with an
> error message? I would *love* to be able to send back "Domain <yyy.com>
> has been suspended" when someone trying to SMTP AUTH using a disabled
> domain, where "yyy.com" is the actual domain name that was suspended.
>
> I'm building a smart gateway that is handling over 6,000 domains and in
> excess of 100,000 mail users. I extract authentication information from
> the back-end servers and put it all in an SQL database. Because the
> back-end servers have customer-accessible "control panels" I chose SQL
> so I didn't have to schedule restarts for the frequent updates that will
> occur.
>
> PROPOSAL
>
> If there is no existing way to do this (I'm using 2.2.5) may I suggest
> adding the parameter "smtpd_sasl_reject_map = ..." where the map is
> searched according to the e-mail lookup algorithm as explained in
> access(5) when authentication fails.
>
> If there is a match, use the message in the right-hand part in any
> rejection messages. ("535 <custom-message>") For example, my standard
> custom message would be "535 Domain <customer-domain.com> is disabled"
> when the domain has been locked for some reason. Using the same method
> as in access(5) would allow me to have messages for specific mail users,
> such as "535 mail account closed due to spamming."
>
> If there is not a match, use the current default error message. ("535
> Error: authentication failed")

Hmm, maybe a job for a Policy-Daemon?

http://www.postfix.org/SMTPD_POLICY_README.html

--
        Andreas

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]