OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Restrict user e-mail access from my domains

From: Magnus Bäck (magnusdsek.lth.se)
Date: Wed Jun 07 2006 - 13:38:14 CDT


On Tuesday, June 06, 2006 at 14:31 CEST,
     Kaspars <kasparsos.lv> wrote:

> Magnus Bäck wrote:
>
> > http://www.postfix.org/RESTRICTION_CLASS_README.html#internal
>
> "What follows is based on the SMTP client IP address, and therefore is
> subject to IP spoofing."
>
> I`m interested that mydestination can send e-mails in for user, not
> mynetworks... I can`t make it with IP.

mydestination is a parameter for listing recipient domains, so it's
not clear what you mean. Are you saying that you can't permit clients
based on their IP address, but only their DNS hostnames? If so, use
check_client_access but be aware that such a solution is not robust
against transient DNS failures.

--
Magnus Bäck
magnusdsek.lth.se