:-)

I'd like to disable any mail from 'my.domain' from external networks and non authenticated users. For envelope addresses my solution works and is as follows:

At first bind valid addresses with their owners:

smtpd_sender_restrictions =
        ...
        reject_sender_login_mismatch,
        ...

But this setting works for existing addresses only. That means that mail from:
qwertyuiop1234567890@my.domain still won't be rejected here.

So the second restriction is:

list1 = check_client_access hash:/etc/postfix/list_of_my_networks, reject

smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        check_sender_access hash:/etc/postfix/file1
        ...

/etc/postfix/file1:
my.domain list1

/etc/postfix/list_of_my_networks
1.2 OK
3.4 OK

I'm not sure if it's the simplest solution but works fine... for the envelope. I'm wondering if I could apply the same during the DATA phase for the 'from:' field? Would be nice if you could do that similarly without involving any other filters / milters. Is it possible?

Best regards,
Marek

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to