On 2013-05-03 Sergio Mira wrote:
> I started a mail server where I manipulate incoming messages through a
> script.
> This is 100% working.
> 
> But my "backend" (postfix configuration) is very basic.
> 
> I am now implementing basic security, trying to understand how postfix
> works and everything.
> 
> First of all, I am trying to reject messages to users that I have
> created, not to root/apache/mysql or something only for the system.
> 
> I tried to configure aliases. It works, but does not reject system
> users.
> 
> Then I tried to configure access file, rejecting messages to
> root/apache/mysql. It worked well, but I am not sure about this is the
> better way. Even because I dont know if add users to a "unauthorized
> users" is better than add "authorized users".
> 
> Is there a way to create a list with authorized users to receive
> emails and all the others -- in the /etc/passwd -- dont?

You're looking for $local_recipient_maps. The default value of that
parameter includes not only the alias maps, but also the passwd file
(proxy:unix:passwd.byname). Add the following line to your main.cf:

local_recipient_maps = $alias_maps

and include a mapping for all valid (local) recipients in $alias_maps:

userA: userA
userB: userB
...

Regards
Ansgar Wiechers
-- 
"Abstractions save us time working, but they don't save us time learning."
--Joel Spolsky

Reply via email to