On Tue, Feb 22, 2011 at 09:12:59PM +0000, Ned Slider wrote:
> On 22/02/11 11:47, Matteo Cazzador wrote:
>> hello i've a strange question about a request, is it possible to create
>> an account (not alias) that can only receive mail and not send?
>> I've a virtual server with mysql backend and saslauth that uses imap
>> login.
>> Thank's
>>
>
> How about a simple check_sender_access located *before* permit_mynetworks
> and any authentication methods:
>
> smtpd_recipient_restrictions =
> check_sender_access
> hash:/etc/postfix/sender_access,
> permit_mynetworks,
> permit_sasl_authenticated,
> ...
>
> /etc/postfix/sender_access
> u...@example.com REJECT You are not permitted to send mail
> # or to block the domain from sending mail
> example.com REJECT This domain can't send mail
>
>
> Would that work?
Fragile in recipient restrictions, risks open relay. If the mail
in question is from authenticated submission senders:
indexed = ${default_database_type}:${config_directory}/
smtpd_sender_restrictions =
check_sender_access ${indexed}sender_access
This may or not be the right solution depending on the system design.
--
Viktor.
