Please don't top-post your replies here. Thank you. On Fri, Aug 30, 2013 at 02:00:09PM -0400, Jean-Sébastien Nicaise wrote: > I'm verifying the sender email (mail from:) of mails sent from > local users, not the recipient email (rcpt to:). > > the mapping parameter used in this case it: *smtpd_sender_login_maps > > * > My question still stands...* > *
Does it? It looks to me as if you have answered it: "use smtpd_sender_login_maps". You might also be missing the restrictions necessary to enforce this: reject_authenticated_sender_login_mismatch and reject_unauthenticated_sender_login_mismatch. See: http://www.postfix.org/SASL_README.html#server_sasl_authz > On Fri, Aug 30, 2013 at 1:50 PM, Wietse Venema > <wie...@porcupine.org> wrote: > > > Jean-S?bastien Nicaise: > > > If a local user sends an email with an invalid email address > > > (mailf from:inva...@example.com, for example), the ldap table > > > lookup does not return anything, hence the mail is blocked. > > > > > > If a local user sends an email with a valid email (mail > > > from:us...@example.com, for example), the ldap table lookup > > > returns the user1's email, then relays the mail. > > > > > > This works well if the user's email is part of the configured > > > domain (@ example.com). > > > > > > The problem is if a user specifies an email address that is not > > > part of the configured domain. If the user sends an email with > > > a source address of inva...@test.net, for example, the ldap > > > table lookup does not return anything, but the email is still > > > relayed. > > > > > > How could change this behaviour and block this email? > > > > If you can arrange for a database with all the valid addresses on > > the internet, then I can show you how to query it with Postfix. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
