---------- Original Message ----------------------------------
From: Wietse Venema <[email protected]>
Reply-To: Postfix users <[email protected]>
Date:  Thu, 18 Feb 2010 17:21:53 -0500 (EST)

>Len Conrad:
>> is this param server-wide, or can it be present in smtpd_*_restrictions ?
>
>Use this in smtpd_mumble_restrictions:
>
>    reject_unlisted_sender
>
>    Reject the request when the MAIL FROM address is not listed in
>    the list of valid recipients for its domain class. See the
>    smtpd_reject_unlisted_sender parameter description for details.
>    This feature is available in Postfix 2.1 and later.
>
>Use this as a main.cf name=value setting, or as "-o name=value"
>override in master.cf:
>
>    smtpd_reject_unlisted_sender (default: no)
>
>    Request that the Postfix SMTP server rejects mail from unknown
>    sender addresses, even when no explicit reject_unlisted_sender
>    access restriction is specified. This can slow down an explosion
>    of forged mail from worms or viruses.
>
>       Wietse

Here's the logic we want:

smtpd_recipient_restrictions =
.
.
 check_sender_access mysql:/path/3rd_level_sender_domain_class.cf,
 smtpd_reject_unlisted_sender = yes,
 reject_unlisted_recipient,  
.
.
permit

3rd_level_sender_domain_class =
.
 smtpd_reject_unlisted_sender = no,
 reject_unlisted_recipient,  
.
permit

thanks
Len

Reply via email to