On Mon, Jan 18, 2010 at 10:14:34AM -0800, Daniel L. Miller wrote:

> But my primary issue is sender validation.  I don't see how, currently, to 
> implement this as a policy daemon without re-writing sender validation into 
> the policy daemon.  I don't see any way, for example, to call another 
> policy daemon after permit_sasl_authenticated returns "OK".

This thread is NOT about address validation, it is about automatic
whitelisting of addresses (as senders) that are observed in outgoing
mail as recipients. No validation is required.

A robust solution is a content filter or milter that inspects the outgoing
message, and ignores out-off-office messages and other auto-replies,
whitelisting only "real" email. I also think that such whitelists should
be for a given pair of correspondents, rather than all mail from the
sender in question.

You could also consider a sync of internal users' contact databases into
the whitelist, at which point, you can do away with any observation of
traffic, and just whitelist senders who appear in recipients' contact
lists.

-- 
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

Reply via email to