On 3/17/09, Sahil Tandon <[email protected]> wrote:
> On Tue, 17 Mar 2009, aio shin wrote:
>
>> (already sent this, but had a problem on the first attempt, am not
>> sure If I sent it successfully)
>
> This is the third time you've sent the same email to this mailing list. If
> you suspect delivery failures, do not just re-send your message; instead,
> check the archive: http://thread.gmane.org/gmane.mail.postfix.user/195000
>
>> I have a postfix server and I want to restrict some users to send only
>> to domain I want to allow. I already accomplished the restriction of
>> who can send to some local users, what I have not is to restrict them
>> to send outside my domain and allow only to defined external
>> destination. my config below:
>>
>> #----Part of main.cf--------------------------------------------------#
>
> Don't paste snippets of main.cf; instead, show output of 'postconf -n'.
> Please also read: http://www.postfix.org/DEBUG_README.html#mail.
>
> --
> Sahil Tandon <[email protected]>
>
Hi,
here the result of postconf -n
#----------------------------------------------------------------
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
default_destination_concurrency_limit = 20
default_destination_recipient_limit = 100
default_extra_recipient_limit = 1000
default_process_limit = 200
default_recipient_limit = 10000
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailbox_size_limit = 10240000000
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 30720000
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = mydomain.com
myhostname = mail.mydomain.com
mynetworks = 127.0.0.0/8, 10.1.0.0/16, 10.4.1.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
queue_minfree = 102400000
readme_directory = /usr/share/doc/postfix-2.5.6/README_FILES
recipient_delimiter = +
relay_domains = $mydestination mydomain2.com
sample_directory = /usr/share/doc/postfix-2.5.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_rbl_client bl.spamcop.net
reject_rbl_client pbl.spamhaus.org
reject_rbl_client sbl.spamhaus.org
smtpd_etrn_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject
smtpd_helo_required = yes
smtpd_recipient_limit = 10000
smtpd_recipient_restrictions =
check_sender_access hash:/etc/postfix/restricted_senders
check_recipient_access hash:/etc/postfix/restricted_local_destinations
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
reject_unknown_recipient_domain
reject_non_fqdn_recipient
reject_unauth_destination
reject_rbl_client sbl.spamhaus.org
reject_rbl_client pbl.spamhaus.org
reject_rbl_client bl.spamcop.net
smtpd_restriction_classes = from_allowed_sender_to_local,
allowed_domains_from_local, local_only
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions =
check_sender_access hash:/etc/postfix/restricted_senders
reject_unauth_destination
reject_unknown_sender_domain
reject_non_fqdn_sender
permit_sasl_authenticated
permit_mynetworks
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual
#-----------------------------------end here--------------------------
