Dnia 18.09.2025 o godz. 16:08:53 R. Diez via Postfix-users pisze: > Apparently, that particular user > runs an ERP system which needs to send e-mails on behalf of any ERP user. > I personally find it iffy for a number of reasons that the ERP system can > impersonate any user when sending e-mails, but let's assume for a moment > that this is desirable, or that the ERP system is not flexible enough, or > whatever.
In my opinion, no mail that is generated internally and automatically should ever use a submission service. Submission service is meant for actual users running regular mail clients. As you correctly noted, such a system should not impersonate an user, which means it should not use a submission service. These systems should either directly use /usr/sbin/sendmail to send mail, or, if they are running on a different server than Postfix, they should relay (not submit) mail through your Postfix server, and the IP address of the server where ERP system is running should be listed in your Postfix configuration as one for which relaying is permitted. This way you can keep 'reject_sender_login_mismatch' or similar in your submission service configuration and it won't touch the ERP systems at all. -- Regards, Jaroslaw Rafa [email protected] -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub." _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
