Re: Combination of two permissions with AND operator

2010-02-13 Thread mouss
Неворотин Вадим a écrit : > Cool)) But then how to combine permit_sasl_authenticated and > permit_tls_clientcerts? The purpose is to allow send mails only for > users with valid certificate and valid login+password))) > smtpd_client_restrictions = permit_mynetworks reject smtpd_

Re: Combination of two permissions with AND operator

2010-02-12 Thread Noel Jones
On 2/12/2010 5:27 AM, Неворотин Вадим wrote: Ok, well, now I decide not to allow connections not from my internal network. But I was really surprised that I can't fully operate with different clients identification information. Where can I write "feature request"?))) It will be good to add state

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Неворотин Вадим : > Ok, well, now I decide not to allow connections not from my internal > network. But I was really surprised that I can't fully operate with > different clients identification information. > > Where can I write "feature request"?))) It will be good to add state values > (someth

Re: Combination of two permissions with AND operator

2010-02-12 Thread Неворотин Вадим
Ok, well, now I decide not to allow connections not from my internal network. But I was really surprised that I can't fully operate with different clients identification information. Where can I write "feature request"?))) It will be good to add state values (something like $is_from_mynetwork, $is

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Неворотин Вадим : > > Mmm... Unfortunatelly, I can't understand how combine > > permit_sasl_authenticated and permit_tls_clientcerts with access_maps. > > You can't, since both return PERMIT One idea would be to use a policy daemon. The daemon can retrieve authentication

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Неворотин Вадим : > Mmm... Unfortunatelly, I can't understand how combine > permit_sasl_authenticated and permit_tls_clientcerts with access_maps. You can't, since both return PERMIT -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus

Re: Combination of two permissions with AND operator

2010-02-12 Thread Неворотин Вадим
Mmm... Unfortunatelly, I can't understand how combine permit_sasl_authenticated and permit_tls_clientcerts with access_maps. Because this maps look like "client - action", but I can't write in client field something like "sasl_autentificated" 2010/2/12 Ralf Hildebrandt > * Неворотин Вадим : > >

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Неворотин Вадим : > Cool)) But then how to combine permit_sasl_authenticated and > permit_tls_clientcerts? The purpose is to allow send mails only for users > with valid certificate and valid login+password))) Phew. Dunno. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Chari

Re: Combination of two permissions with AND operator

2010-02-12 Thread Неворотин Вадим
Cool)) But then how to combine permit_sasl_authenticated and permit_tls_clientcerts? The purpose is to allow send mails only for users with valid certificate and valid login+password))) 2010/2/12 Ralf Hildebrandt > * Ralf Hildebrandt : > > > You need restriction classes for that :) > > I suck. I

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > You need restriction classes for that :) I suck. I left out the restriction classes... > > smtp_recipient_restriction = > > permit_mynetworks > > permit_sasl_authenticated > > smtpd_recipient_restriction = >check_client_access hash:/etc/postfix/mynetworks >rej

Re: Combination of two permissions with AND operator

2010-02-12 Thread Ralf Hildebrandt
* Неворотин Вадим : > I need to allow to send mails throw my Postfix SMTP server only for > users from mynetwork with valid SMTP authentication. But I can't > understand how to combine two permissions in smtp_recipient_restriction > options: permit_mynetworks and permit_sasl_authenticated. You ne

Combination of two permissions with AND operator

2010-02-11 Thread Неворотин Вадим
I need to allow to send mails throw my Postfix SMTP server only for users from mynetwork with valid SMTP authentication. But I can't understand how to combine two permissions in smtp_recipient_restriction options: permit_mynetworks and permit_sasl_authenticated. If I write smtp_recipient_restrict