OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Fwd: Re: reject sender with a different domain of mine]

From: Tony Earnshaw (tonnihetnet.nl)
Date: Thu Aug 02 2007 - 08:48:50 CDT


__Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl

attached mail follows:


Authentication is ok, it works for users who send mail from outside, and
with the option permit_sasl_authenticated, I can easily do it for my local
network.

I read RESTRICTION_CLASS_README, but it works if we can say: this user must
not go outside. And me, I will say: all user can send a mail (to a local or
to the internet), except if the adress of the sender doesn't exist. I have a
file for the option local_recipient_maps, all my users are inside this file.
So, postfix cand say if a local recipient exist or not. I would like to do
the same thing, but for the sender. I would like that postfix check if the
mail user exist (without authentication for the moment) before authorize the
mail to be send. Is it possible? If not, perhaps authorize only mail with
my domain at the end of the adress

2007/8/2, Tony Earnshaw <tonnihetnet.nl>:
>
> David Brachet skrev, on 02-08-2007 13:21:
>
> > I have a problem: everybody can send a mail from my local network. For
> > example, my domain is my_domain.com, and i can send a mail if my mail
> > address is toto.fr <http://toto.fr>. I would like that a user on my
> > local network can send a mail only if his mail address is
> > totomy_domain.com, and for totototo.fr <mailto:totototo.fr>, the user
> > must authenticate for example.
> >
> > What is the rule i must add? I try several, but no result. Thanks
>
> Most of the answer is in RESTRICTION_CLASS_README, at the end. If you
> want to allow authenticated users unrestricted relay, you would
> implement SASL authentication and put permit_sasl_authenticated before
> check_sender_access.
>
> --Tonni
>
> --
> Tony Earnshaw
> Email: tonni at hetnet dot nl
>