On 11.07.2011, at 12:40, Damien Robinet wrote:
This issue is not to be solved in postfix, but in any kind of front-end
(organizational first, then maybe technical).
> We have many agencies that can use our mail server.
> Each agency has one or more domain name. They can add their domain in
^^^^^^^^^^^^
As Wietse hinted, this is the key to the problem. They can not only add /their/
domains, but /any arbitrary/ domain as well.
Some ideas to solve that:
* remove the possibility for customers to add domains, and let them request
domains through your support / customer care department
* in their (assumedly web) frontend, give customers the ability to register
domains with their account. Validate domain registrations before you activate
them. Allow them to add only activated domains that are linked to their account
* (give each customer a separate postfix instance so that any change affects
only
themselves)
Rainer
