OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: dis-allow users to send but allow them to check incoming

From: aio shin (aioshingmail.com)
Date: Fri Sep 14 2007 - 12:01:51 CDT


Hi,

I have now found 2 solution on my case, first, since I'm using Horde
as webmail client, I will just disable Horde's mailer as this is an
option on horde configuration. Second solution is to allow users to
use Mail Client software then dis-allow their IP Blocks on Mail
servers smtp access. Or remove them on mynetwork list.

With regards to Webmail client, I had to setup to Horde webmail on the
same host, the other one has been dis-allowed to send email, then it
will be used by those users for them to read mail only but can't send.
Then an access list should be apply on the other Horde Webmail which
sending is allowed.

Thanks for those who read and reply.

Peace!

On 9/13/07, mouss <mlist.onlyfree.fr> wrote:
> aio shin wrote:
> > Thanks really, but those users usually check their emails via webmail,
> > we're using Horde and dovecot and Postfix. So basically, the outgoing
> > should be done by the webmail client which is horde. Any workaround on
> > this?
>
> Since the webmail authenticates the user, you can just add
>
> smtpd_sender_restrictions =
> check_sender_access hash:/etc/postfix/cantsend
>
> == cantsend
> fooexample.com REJECT address not allowed to send mail
>
>
> But the users can still use smtp and forge their address. But then
> anybody can. The only defense against this is authentication, as Erwan
> said.
>