From: Truong Tan Son (sonttfcv.fujitsu.com)
Date: Sun Nov 13 2005 - 21:45:05 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Dear Sir,

Postfix server is now running very good with flexible options you wrote.

That is exactly the target I want.

Thanks you very much.

----- Original Message -----
From: "mouss" <usebsdfree.fr>
To: "Truong Tan Son" <sonttfcv.fujitsu.com>
Cc: <postfix-userspostfix.org>
Sent: Saturday, November 12, 2005 5:52 PM
Subject: Re: How to prevent anonymous send fake mail on postfix.

Truong Tan Son a écrit :

> Dear Sir,
>
> mynetworks = 172.16.11.0/24, 172.16.12.0/24, 127.0.0.0/8
>
> The target, on "mynetworks" I want postfix accept UNIQUE sender of "domain.com" :
>
> domain.com OK
> anotherdomain.com REJECT
>
>
> And accepts mail send from INTERNET or from OTHER networks ( 203.162...., 192.168. ...,.....)

so you want to refuse outbound mail with a sender not in your domain?
Use restriction classes. Here is an example.

smtpd_restriction_classes = ... check_mynetworks ...

smtpd_recipient_restrictions =
    check_client_access cidr:$dir/client_access
    reject_unauth_destination
    ...

check_mynetworks = check_sender_access pcre:$dir/mysenders

== client_access:
# No OK should be here unless you know why
172.16.11.0/24 check_mynetworks
172.16.12.0/24 check_mynetworks
...

== mysenders
/mydomain.example$/ DUNNO
/./ REJECT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]