OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: allow MAIL FROM local email accounts only

From: Brian Evans - Postfix List (grknightscent-team.com)
Date: Thu Jun 04 2009 - 11:17:43 CDT


Ignacio Garcia wrote:
> Hi there.
>
> We have a couple of servers handling thousands of messages a day. We
> noticed that some of our users will use their autheticated account to
> send messages from other valid accounts not sitting in our servers. By
> using smtpd_reject_unlisted_sender = yes we solve the problem partially
> by not letting users to use an incorrect local email account to send
> messages. However, is there a way to prevent local authenticated users
> sending email with valid hotmail or gmail accounts through our smtp
> servers? We cannot use reject_authenticated_sender_login_mismatch since
> some of our business customers have their own intranet email servers
> doing smtp authenticated relays.
>

You can separate them by using a check_sender_access.
Expand or modify to fit your needs

Example using pcre table:
smtpd_sender_restrictions=
...
check_sender_access pcre:/etc/postfix/auth_senders_check
...

/etc/postfix/auth_senders_check:

/^.*bizcustomer1.example.com$/ DUNNO
/^.*bizcustomer2.example.com$/ DUNNO
/^/ reject_authenticated_sender_login_mismatch