On 12/14/2011 3:18 PM, Simon wrote:
> Hi There,
>
> We have a postfix server running on debian squeeze connected to mysql for
> SASL authentication information... along with the following settings in
> main.cf:
>
> smtpd_sender_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination,
> reject_unknown_sender_domain,
> permit
>
> smtpd_recipient_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination,
> reject_unknown_recipient_domain,
> permit
>
> We also run the outbound email thru clamav.
>
> What we would like todo is update our config so that postfix will only send
> "from" {anything}@clientdomain.com (where the domain is listed in our
> "transport" mysql table) and from b...@externaldomain.com (where the user has
> run thru a registration process via our web-based control panel - the same
> process as gmail)..
>
> Can someone please give me some pointers here on where to start? I have
> searched quite bit for this, but can't think of the correct terms to find
> what i want...
>
> Thanks!
>
> Simon
>
You can associate sasl credentials with allowed "MAIL FROM" envelope
sender. This does not restrict the contents of the From: header.
http://www.postfix.org/postconf.5.html#reject_authenticated_sender_login_mismatch
http://www.postfix.org/postconf.5.html#smtpd_sender_login_maps
-- Noel Jones
