On 05/30/2010 01:29 PM, Jarrod Neven wrote:
I am trying to setup restriction to prevent selected users from
sending email externally. I have followed the "Restricting what users
can send mail to off-site destinations" guide at
http://www.postfix.net/RESTRICTION_CLASS_README.html but it is not
having any effect.
Then you have not put the restrictions in the correct order, or you are
lacking restrictions that are required to make it work.
It appears that no matter what I do smtpd_recipient_restrictions has
no effect. Have set the hash file to an invalid file and created
syntax errors and there are no error messages in the log, even set
smtpd_recipient_restrictions = reject and it did nothing.
smtpd_recipient_restrictions is the LAST restriction class to be
applied. if mail was accepted before then, REJECTing it here does nothing.
In maser.cf I have added -v -v to the smtpd process and it shows no
mention of the value smtpd_recipient_restrictions, looks like it is
ignored completely.
Is anything that can prevent smtpd_recipient_restrictions from
working? Maybe a compiled option missing?
I have postfix 2.5.1 on centos 64bit
#postconf -n
config_directory = /etc/postfix
mail_owner = postfix
setgid_group = postdrop
smtpd_client_restrictions = check_sender_access
hash:/etc/postfix/restricted_senders
check_sender_access does not work here; remove it.
smtpd_delay_reject = no
You NEED this to be "yes".
smtpd_recipient_restrictions = check_sender_access
hash:/etc/postfix/restricted_senders
That is not sufficient by a long shot.
Take a look at the UCE cheat sheet (google for it!)
smtpd_restriction_classes = local_only
I don't know who told you to set this, but - don't. leave options you
don't understand well enough alone.
smtpd_sender_restrictions = check_sender_access
hash:/etc/postfix/restricted_senders
This is the first instance where sender checks can be applied.
J.
