OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Postfix 2.2.10 and TLS with cient certificates for relay

From: Alexander Hoogerhuis (alexhboxed.no)
Date: Mon Jul 10 2006 - 23:58:25 CDT


I've got my postfix server to work so that it can allow clients with
valid certificates to relay, which makes it a lot easier for me instead
of making users to remember yet another passord.

Currently I have to fingerprint every client certificate that should be
allowed to relay and manually update files, and it got me thinking. How
hard would it be for someone competent (that rules me out) to create
another smtpd-restriction that would automagically allow relaying if the
client certificate's email address (from the DN) matches any of the
domains in $virtual_mailbox_domains or $relay_domains?

A feature like that would make the overhead in admining a relay for
customers almost zero when using certificates, or not?

-A :)