On 3/17/09, Sahil Tandon <sa...@tandon.net> wrote:
> On Tue, 17 Mar 2009, aio shin wrote:
>
>> (already sent this, but had a problem on the first attempt, am not
>> sure If I sent it successfully)
>
> This is the third time you've sent the same email to this mailing list.  If
> you suspect delivery failures, do not just re-send your message; instead,
> check the archive: http://thread.gmane.org/gmane.mail.postfix.user/195000
>
>>  I have a postfix server and I want to restrict some users to send only
>>  to domain I want to allow. I already accomplished the restriction of
>>  who can send to some local users, what I have not is to restrict them
>>  to send outside my domain and allow only to defined external
>>  destination. my config below:
>>
>>  #----Part of main.cf--------------------------------------------------#
>
> Don't paste snippets of main.cf; instead, show output of 'postconf -n'.
> Please also read: http://www.postfix.org/DEBUG_README.html#mail.
>
> --
> Sahil Tandon <sa...@tandon.net>
>

Hi,

here the result of postconf -n


#----------------------------------------------------------------
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
default_destination_concurrency_limit = 20
default_destination_recipient_limit = 100
default_extra_recipient_limit = 1000
default_process_limit = 200
default_recipient_limit = 10000
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailbox_size_limit = 10240000000
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 30720000
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = mydomain.com
myhostname = mail.mydomain.com
mynetworks = 127.0.0.0/8, 10.1.0.0/16, 10.4.1.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
queue_minfree = 102400000
readme_directory = /usr/share/doc/postfix-2.5.6/README_FILES
recipient_delimiter = +

relay_domains = $mydestination mydomain2.com

sample_directory = /usr/share/doc/postfix-2.5.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop

smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes

smtpd_banner = $myhostname ESMTP $mail_name

smtpd_client_restrictions =
        permit_mynetworks
        permit_sasl_authenticated
        reject_rbl_client bl.spamcop.net
        reject_rbl_client pbl.spamhaus.org
        reject_rbl_client sbl.spamhaus.org

smtpd_etrn_restrictions =
        permit_mynetworks
        permit_sasl_authenticated
        reject

smtpd_helo_required = yes

smtpd_recipient_limit = 10000

smtpd_recipient_restrictions =
        check_sender_access hash:/etc/postfix/restricted_senders
        check_recipient_access hash:/etc/postfix/restricted_local_destinations
        permit_sasl_authenticated
        permit_mynetworks
        reject_unauth_destination
        reject_unknown_recipient_domain
        reject_non_fqdn_recipient
        reject_unauth_destination
        reject_rbl_client sbl.spamhaus.org
        reject_rbl_client pbl.spamhaus.org
        reject_rbl_client bl.spamcop.net
        
smtpd_restriction_classes = from_allowed_sender_to_local,
allowed_domains_from_local, local_only
        
smtpd_sasl_auth_enable = yes    
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
        
smtpd_sender_restrictions =
        check_sender_access hash:/etc/postfix/restricted_senders        
        reject_unauth_destination
        reject_unknown_sender_domain
        reject_non_fqdn_sender
        permit_sasl_authenticated
        permit_mynetworks

smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual
#-----------------------------------end here--------------------------

Reply via email to