Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Viktor Dukhovni
On Thu, Apr 05, 2012 at 02:25:33AM -0400, Eric Kimminau wrote: > Correct. domain1.com is the local domain, domain2 and domain3 are > outside the local network and will pass through mailhost.domain1.com > if they leave the local system. Good, then DO NOT use the same access table to li

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Wietse Venema
Wietse Venema: > Eric Kimminau: > > Good morning! > > > > I have long respected your open source efforts since we worked together > > during the Linux MIPS port when I was at SGI. > > > > I appreciate your comments and suggestions but you really haven't been of > > any help. You pointed me down a

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Wietse Venema
Eric Kimminau: > Good morning! > > I have long respected your open source efforts since we worked together > during the Linux MIPS port when I was at SGI. > > I appreciate your comments and suggestions but you really haven't been of > any help. You pointed me down a path that wasn't sustainable (

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Mark Goodge
On 05/04/2012 15:29, Eric Kimminau wrote: If you really must know, it is a Healthcare based company and we are developing a registration method. If the registered address used is any but these three domains a secondary process is initiated which will generate a registration packet being created

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Eric Kimminau
Good morning! I have long respected your open source efforts since we worked together during the Linux MIPS port when I was at SGI. I appreciate your comments and suggestions but you really haven't been of any help. You pointed me down a path that wasn't sustainable (write transport blocks for ev

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Wietse Venema
Eric Kimminau: > I really don't need to explain for any other reason than it is a > requirement of my customer. I appreciate the banter but the harder And nothing requires anyone to help you, let alone to propose a solution that may be better. Good luck. Wietse

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-05 Thread Eliezer Croitoru
On 05/04/2012 09:25, Eric Kimminau wrote: On 4/5/2012 12:58 AM, Viktor Dukhovni wrote: On Wed, Apr 04, 2012 at 03:57:00PM -0400, Eric Kimminau wrote: My goal is to limit outbound email to only three domains. All other email destined for any other domain should be redirected to a single, valid

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Eric Kimminau
On 4/5/2012 12:58 AM, Viktor Dukhovni wrote: On Wed, Apr 04, 2012 at 03:57:00PM -0400, Eric Kimminau wrote: My goal is to limit outbound email to only three domains. All other email destined for any other domain should be redirected to a single, valid internal

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Viktor Dukhovni
On Wed, Apr 04, 2012 at 04:11:34PM -0400, Wietse Venema wrote: > /etc/postfix/transport: > example.com : > > * reject:this destination is not allowed That should of course be error:5.1.2 ... not reject: ... since "reject" is not a transport, is is an acc

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Viktor Dukhovni
On Wed, Apr 04, 2012 at 03:57:00PM -0400, Eric Kimminau wrote: > My goal is to limit outbound email to only three domains. All other email > destined for any other domain should be redirected to a single, valid > internal mail box. I take it these are *destination* (recipient) domains, not *origi

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Noel Jones
On 4/4/2012 9:55 PM, Eric Kimminau wrote: > I really don't need to explain for any other reason than it is a requirement > of my customer. I appreciate the banter but the harder you fight me the more > it makes me believe the product cant meet our need. > > Is it possible to limit all outbound

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Eric Kimminau
I really don't need to explain for any other reason than it is a requirement of my customer. I appreciate the banter but the harder you fight me the more it makes me believe the product cant meet our need. Is it possible to limit all outbound email to 3 domains? If so, how? Is it possible to r

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Wietse Venema
Wietse: > Instead of redirect, why not use reject: > /etc/postfix/transport: > example.com: > * reject:this destination is not allowed Eric Kimminau: > 1) I need to know when someone is attempting to use any domain but > what we have approved for testing. Why do you care what domains use

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Eric Kimminau
2 issues: 1) I need to know when someone is attempting to use any domain but what we have approved for testing. This is the reason for the redirect. I'm open to alternatives but other than babysitting log files or every userid mailbox used REJECT is tough to track. 2) I only have 3 domains tha

Re: Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Wietse Venema
Eric Kimminau: > My goal is to limit outbound email to only three domains. All other email > destined for any other domain should be redirected to a single, valid > internal mail box. > > It isn't working. Email to addresses outside this domain are still being > delivered. > > /etc/postfix/access

Problems with witelist - limit outbound domains - doesnt

2012-04-04 Thread Eric Kimminau
My goal is to limit outbound email to only three domains. All other email destined for any other domain should be redirected to a single, valid internal mail box. It isn't working. Email to addresses outside this domain are still being delivered. /etc/postfix/access: domain1.com OK domain2.com