On Wed, May 07, 2014 at 10:28:46AM -0400, Wietse Venema wrote:
> Sebastian Nielsen:
> > I want to reject senders, that are relaying, using a domain not
> > on a approved list. eg all sender domains that aren?t @sebbe.eu
> > but are relaying, should be rejected.
>
> Postfix restrictions are not a Turing-complete access control
> language. For complex policies use a policy plug-in such as
> postfwd. http://www.postfwd.org/
But in this case there is a simpler solution:
main.cf:
indexed = ${default_database_type}:${config_directory}/
smtpd_sender_restrictions =
check_sender_access ${indexed}relay-sender-check,
reject_unauth_destination
relay-sender-check:
sebbe.eu permit_mynetworks, permit_sasl_authenticated
--
Viktor.
