Re: Enforcing sending domain from the inside network

2008-12-31 Thread mouss
D. Karapiperis a écrit : > > Open relay will not take place if the checks are included on > smtpd_sender_restrictions? an OK in smtpd_sender_restrictions does not skip smtpd_recipient_restrictions, and relay check is done in the latter (reject_unauth_destination).

Re: Enforcing sending domain from the inside network

2008-12-31 Thread D. Karapiperis
O/H mouss έγραψε: D. Karapiperis a écrit : O/H Wietse Venema έγραψε: Since he asked for a "nice" way to specify this in Postfix, a "nice" implementation of this would look like this: /etc/postfix/main.cf: smtpd_sender_restrictions = permit_mydomain, reject_mynetworks Where the

Re: Enforcing sending domain from the inside network

2008-12-30 Thread mouss
D. Karapiperis a écrit : > O/H Wietse Venema έγραψε: >> Since he asked for a "nice" way to specify this in Postfix, a "nice" >> implementation of this would look like this: >> >> /etc/postfix/main.cf: >> smtpd_sender_restrictions = permit_mydomain, reject_mynetworks >> >> Where the details

Re: Enforcing sending domain from the inside network

2008-12-30 Thread D. Karapiperis
O/H Wietse Venema έγραψε: Since he asked for a "nice" way to specify this in Postfix, a "nice" implementation of this would look like this: /etc/postfix/main.cf: smtpd_sender_restrictions = permit_mydomain, reject_mynetworks Where the details are hidden by restriction classes: /etc

Re: Enforcing sending domain from the inside network

2008-12-30 Thread Wietse Venema
Victor Duchovni: > On Tue, Dec 30, 2008 at 12:38:38PM -0500, Wietse Venema wrote: > > > For example > > > > /etc/postfix/main.cf: > > smtpd_sender_restrictions = > > check_sender_access hash:/etc/postfix/sender_access > > check_client_access pcre:/etc/postfix/client_access.pcre > > >

Re: Enforcing sending domain from the inside network

2008-12-30 Thread Victor Duchovni
On Tue, Dec 30, 2008 at 12:38:38PM -0500, Wietse Venema wrote: > For example > > /etc/postfix/main.cf: > smtpd_sender_restrictions = > check_sender_access hash:/etc/postfix/sender_access > check_client_access pcre:/etc/postfix/client_access.pcre > > hash:/etc/postfix/sender_acces

Re: Enforcing sending domain from the inside network

2008-12-30 Thread mouss
Wietse Venema a écrit : > D. Karapiperis: >> I did the from_inside_network thing to do the logical AND regarding the >> sending domain. Is there any way to do this woth permit_mynetworks? >> >> Is there any way to permit local users (from the inside network) to send >> emails using the business d

Re: Enforcing sending domain from the inside network

2008-12-30 Thread mouss
D. Karapiperis a écrit : > I did the from_inside_network thing to do the logical AND regarding the > sending domain. A "logical AND" can be replaced by a sequence. and a sequence is easier to manage (in the mind, on paper, ...). > Is there any way to do this woth permit_mynetworks? > to do what

Re: Enforcing sending domain from the inside network

2008-12-30 Thread Wietse Venema
D. Karapiperis: > I did the from_inside_network thing to do the logical AND regarding the > sending domain. Is there any way to do this woth permit_mynetworks? > > Is there any way to permit local users (from the inside network) to send > emails using the business domain in a clear and nice way

Re: Enforcing sending domain from the inside network

2008-12-30 Thread D. Karapiperis
O/H mouss έγραψε: D. Karapiperis a écrit : Hi All I have a question regarding postfix restrictions. Is there a way for Postfix to enforce some kind of policy so that all the outgoing (allowed) mails be " @business.com" and all the others be rejected. Of course this policy should be enf

Re: Enforcing sending domain from the inside network

2008-12-29 Thread mouss
D. Karapiperis a écrit : > > > Hi All >> >> I have a question regarding postfix restrictions. >> >> Is there a way for Postfix to enforce some kind of policy so that all >> the outgoing (allowed) mails be " @business.com" and all the others be >> rejected. >> Of course this policy should be enfor

Re: Enforcing sending domain from the inside network

2008-12-29 Thread Victor Duchovni
On Mon, Dec 29, 2008 at 03:45:05PM +0200, D. Karapiperis wrote: > > > Hi All > > > >I have a question regarding postfix restrictions. > > > >Is there a way for Postfix to enforce some kind of policy so that all > >the outgoing (allowed) mails be " @business.com" and all the others be > >rejected

Enforcing sending domain from the inside network

2008-12-29 Thread D. Karapiperis
Hi All I have a question regarding postfix restrictions. Is there a way for Postfix to enforce some kind of policy so that all the outgoing (allowed) mails be " @business.com" and all the others be rejected. Of course this policy should be enforced only to the outgoing emails not in the incom