On 2014.09.10 14.02, wie...@porcupine.org (Wietse Venema) wrote:
> btb:
>> hi-
>>
>> i have a mail submission server [submission/587 only] [msa.example.com]
>> for our users [config below].  in that context, it's working as desired.
>>    we also have another, separate, msa [msa.systems.example.com], which
>> servers and other infrastructure devices use for submitting mail.  how
>> can i configure postfix so that all mail introduced via sendmail(1) on
>> msa.example.com [regardless of envelope sender/recipient, etc] is
>> delivered directly to msa.systems.example.com:submission,
> 
> /etc/postfix/master.cf:
>      pickup     ..   ..   ..   ..   ..   ..   ..   ..  pickup
>       -o filter=smtp_pickup:a.systems.example.com:submission
>      smtp_pickup ..  ..   ..   ..   ..   ..   ..   ..  smtp
>       -o 
> smtp_sender_dependent_authentication=$smtp_pickup_sender_dependent_authentication
>       -o smtp_sasl_password_maps=$smtp_pickup_sasl_password_maps
> 
>> and smtp auth is performed with the necessary credentials,
> 
> Perhaps you mean sender-dependent credentials?
> 
> /etc.postfix/master.cf:
>      smtp_pickup_sender_dependent_authentication = yes
>      smtp_pickup_sasl_password_maps = hash:/etc/postfix/smtp_pickup_sasl_pass

here's what i ended up with [i think -o filter=... was meant to be -o 
content_filter=... ? - and in this case, it's just a single set of credentials]:

main.cf:
    null_client_syslog_name = postfix/null_client
    null_client_content_filter = 
smtp-nullclient:[msa.systems.${mydomain}]:submission
    null_client_sasl_auth_enable = yes
    null_client_sasl_tls_security_options = noanonymous
    null_client_sasl_password_maps = 
hash:${table_directory}/null_client_smtp_auth_creds

master.cf:
    pickup    unix  n       -       -       60      1       pickup
        -o content_filter=${null_client_content_filter}

    smtp-nullclient    unix  -       -       -       -       10       smtp
        -o syslog_name=${null_client_syslog_name}
        -o smtp_sasl_auth_enable=${null_client_sasl_auth_enable}
        -o 
smtp_sasl_tls_security_options=${null_client_sasl_tls_security_options}
        -o smtp_sasl_password_maps=${null_client_sasl_password_maps}

this seems to be working well, thanks.

-ben

Reply via email to