Re: Mail from @somedomain.tld allowed only from some CIDR ranges?

[Marek Kozlowski]

:-)

No, misunderstanding. I'm not asking about SPF, DKIM etc.

smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        ...


- sth1.tld,
- sth2.tld,
- sth3.tld.


Best regards,
Marek


On 2/7/21 5:33 PM, Marek Kozlowski wrote:

I have a mail server for a few domains. I need something more general that permit_mynetworks. From some subnets non authenticated users should be able to send mail with those domain names. For example imagine I'm a mail server for: Mail from 192.168.1/24 with sender's address 'sth1.tld' should be accepted even if the user is not authenticated, and rejected without authentication for other CIDR blocks. Mail from 192.168.2/24 with sender's address 'sth2.tld' should be accepted even if the user is not authenticated, and rejected without authentication for other CIDR blocks. Mail from 192.168.3/24 with sender's address 'sth3.tld' should be accepted even if the user is not authenticated, and rejected without authentication for other CIDR blocks.

:-)


- if addresses from the ranges belong to 'somedomain.tld'?


Thanks in advance,
best regards,
Marek

Presumably it's my fault but I cannot find such an option. If so - thank you for directing me to it. I'm wondering if it possible to limit incoming mail with '...@somedomain.tld' specified as a sender address*) to IPs belonging from some CIDR ranges: - if addresses from the ranges and 'somedomain.tld' A records don;t cover the same sets of hosts? *) For both envelope and internal 'from:' would be perfect; if not - for only one of them.

smime.p7s
Description: S/MIME Cryptographic Signature