OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: reject_sender_login_mismatch on certain domains only

From: mouss (mlist.onlyfree.fr)
Date: Wed Aug 01 2007 - 15:58:56 CDT


John Thomas wrote:
> I am hosting mail for friends and family on Postfix 2.3.3. I would
> like to turn on reject_sender_login_mismatch, but only for certain
> domains. Could I trouble you for a short howto?

smtpd_restriction_classes = verify_login

smtpd_sender_restrictions =
    check_recipient_access hash:/etc/postfix/special_domains

verify_login =
    check_client_access hash:/etc/postfix/client_whitelist
    reject_sender_login_mismatch

== special_domains
domain1.example verify_login
domain2.example dunno
sub.domain2.example verify_login
domain3.example verify_login
.domain3.example verify_login

(the leading 'dot' is to be used in relation with
parent_domain_matches_subdomains. see docs for more info).

the client_whitelist should be used if you have internal relays that
should be whitelisted (they can't use a sender=login). otherwise,
remove the line.