Hello,

I have tried to restrict users only to be able to send mail with their own e-mail addresses.

(I am aware of difference between envelope from: and header From: but I have to start somewhere).


after reading smtpd_sender_login_maps and reject_sender_login_mismatch I thought I need to map all protected I have set up:

smtpd_sender_restrictions =
        reject_non_fqdn_sender,
        reject_unknown_sender_domain,
        reject_sender_login_mismatch



what I see in logs:

May  1 02:04:15 fantomas postfix/smtpd[31415]: warning: restriction 
`reject_authenticated_sender_login_mismatch' ignored: no SASL support
May  1 02:04:15 fantomas postfix/smtpd[31415]: warning: restriction 
`reject_unauthenticated_sender_login_mismatch' ignored: no SASL support

1.
- do I need to explicitly enable SASL on port 25 in order to be able to regulate the sender addresses for users?
isn't this what reject_unauthenticated_sender_login_mismatch does?


2. reject_sender_login_mismatch

Reject the request when $smtpd_sender_login_maps specifies an owner for the MAIL FROM address, but the client is not (SASL) logged in as that MAIL FROM address owner; or when the client is (SASL) logged in, but the client login name doesn't own the MAIL FROM address according to $smtpd_sender_login_maps.

- do I understand this correctly as two alternative ways of explaining
"you can send mail from x...@example.com only if it's in smtpd_sender_login_maps and lists your username"?


3. reject_known_sender_login_mismatch

Apply the reject_sender_login_mismatch restriction only to MAIL FROM addresses that are known in $smtpd_sender_login_maps. This feature is available in Postfix version 2.11 and later.

- how is this different from other reject_*sender_login_mismatch?


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.

Reply via email to