Hi,

i'd like to protect some internal accounts as described at
http://www.postfix.org/RESTRICTION_CLASS_README.html

Currently, I have the following setup:

smtpd_recipient_restrictions =
 reject_unauth_pipelining
 permit_inet_interfaces
 permit_sasl_authenticated
 reject_non_fqdn_hostname
 reject_non_fqdn_sender
 reject_non_fqdn_recipient
 reject_unauth_destination
 reject_invalid_hostname
 check_recipient_access
hash:/usr/local/etc/postfix/protected_destinations

smtpd_restriction_classes = auth_only
auth_only =
 permit_sasl_authenticated
 reject

where protected domain says:
m...@mail.com   auth_only

Now the question: In the current setup, all SASL auth'ed users can send
mail to my protected destinations. Now I want to add a layer, so that
SASL auth'ed users must also send from a certain domain only.

Or even better: SASL usernames must contain a certain domain.

I've now played for hours without any luck. Any pointers in the right
direction are really welcomed. Whenever I add another restriction class,
it seems the first rule wins...

Thanks,
Stephan

Reply via email to