From: AlxFrag (alxfraggmail.com)
Date: Tue Jan 15 2008 - 02:17:00 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

mouss wrote:
> AlxFrag wrote:
>> Hi,
>>
>> i'd like to ask if it is possible to enforce the limitation described
>> in the following example:
>>
>> one of my users logs in as myusermydomain. He can send emails
>> through my mail server using any "from address" he wants.
>> Can i force him to use only the "myusermydomain" as from address in
>> order to be able to send emails through my smtp server?
>
> you need to use authentication and:
>
> http://www.postfix.org/postconf.5.html#smtpd_sender_login_maps
> http://www.postfix.org/postconf.5.html#reject_sender_login_mismatch
Thanks for your reply.

In main.cf i've put:
*******************
smtpd_sender_restrictions=check_sender_access
hash:/etc/postfix/block_senders, hash:/etc/postfix/my_domains

smtpd_sender_login_maps=ldap:/etc/postfix/local_recipients.cf

smtpd_restriction_classes=verify_login

verify_login=reject_sender_login_mismatch
*******************

In my_domains:

mydomain1 verify_login
mydomain2 verify_login

Using this configuration, user1mydomain1 cannot pretend he is
user2mydomain1 or he is anyusermydomain1 or anyusermydomain2.

The problem is that he can pretend he is anyuserany_other_domain.

Is there any solution for this?

Alex

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]