Hi, i'd like to protect some internal accounts as described at http://www.postfix.org/RESTRICTION_CLASS_README.html
Currently, I have the following setup: smtpd_recipient_restrictions = reject_unauth_pipelining permit_inet_interfaces permit_sasl_authenticated reject_non_fqdn_hostname reject_non_fqdn_sender reject_non_fqdn_recipient reject_unauth_destination reject_invalid_hostname check_recipient_access hash:/usr/local/etc/postfix/protected_destinations smtpd_restriction_classes = auth_only auth_only = permit_sasl_authenticated reject where protected domain says: m...@mail.com auth_only Now the question: In the current setup, all SASL auth'ed users can send mail to my protected destinations. Now I want to add a layer, so that SASL auth'ed users must also send from a certain domain only. Or even better: SASL usernames must contain a certain domain. I've now played for hours without any luck. Any pointers in the right direction are really welcomed. Whenever I add another restriction class, it seems the first rule wins... Thanks, Stephan