On Mon, Apr 08, 2019 at 08:02:41AM -0700, Janis wrote:

> in main.cf I have put:
> smtpd_sender_login_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf,
>                         mysql:/etc/postfix/mysql_virtual_alias_maps.cf
> 
> smtpd_sender_restrictions = permit_mynetworks,
>         permit_sasl_authenticated,
>         reject_sender_login_mismatch,

That's an *envelope sender* check.

> *The message gets rejected in log with*
> NOQUEUE: reject: RCPT from myother.server.tld[192.168.7.229]: 553 5.7.1
> <us...@mydomain.tld>: Sender address rejected: not logged in;
> from=<us...@mydomain.tld> to=<us...@mydomain.tld>

This message forges the envelope sender.

> Return-Path: <se...@kousaikan.com>

This message does not forge a local envelope sender (RFC2821.MAIL command).

> Delivered-To: us...@mydomain.tld
> Message-ID: <j2w06zpo-msrn-unjm-z17p-4ld3vmq62...@mlcp.tzzu>
> To: us...@mydomain.tld
> From: <us...@mydomain.tld>

It forges the header sender (RFC2822.From header).  Note that your
own post to this list will be Cc'd to your mailbox from outside,
bearing your email address as the message author.  (It will have
the list as "RFC2822.Sender").  So you generally should not block
external messages solely on the presence of a "From" address in
one of your domains.

-- 
        Viktor.

Reply via email to