Re: permit ip, reject domain

2013-07-08 Thread Feel Zhou
Thanks for Noel Jones About "ip match domain", It's working now. /etc/postfix/main.cf smtpd_sender_restrictions = check_client_access cidr:/etc/postfix/enforce_ip_match_domain smtpd_restriction_classes = example example = check_sender_access hash:/etc/postfix/example.do

Re: permit ip, reject domain

2013-06-07 Thread Noel Jones
On 6/6/2013 9:36 PM, Feel Zhou wrote: > Thanks Noel > > one more thing, How to setting one IP bind two or three domain > > Thanks a lot > > ... > > # require_sender_A > A.example.com OK C.example.com OK -- Noel Jones

Re: permit ip, reject domain

2013-06-06 Thread Feel Zhou
Thanks Noel one more thing, How to setting one IP bind two or three domain Thanks a lot 2013/6/6 Noel Jones > On 6/6/2013 4:02 AM, Feel Zhou wrote: > > Thanks for all > > I have read the document > > http://www.postfix.org/RESTRICTION_CLASS_README.html > > Maybe it's not what I need to settin

Re: permit ip, reject domain

2013-06-06 Thread Noel Jones
On 6/6/2013 4:02 AM, Feel Zhou wrote: > Thanks for all > I have read the document > http://www.postfix.org/RESTRICTION_CLASS_README.html > Maybe it's not what I need to setting. I don't have internal email > distribution list, so do not need to protect it. And I don't want to > restrict any user s

Re: permit ip, reject domain

2013-06-06 Thread Feel Zhou
Thanks for all I have read the document http://www.postfix.org/RESTRICTION_CLASS_README.html Maybe it's not what I need to setting. I don't have internal email distribution list, so do not need to protect it. And I don't want to restrict any user send mail to off-site destinations. My customer hav

Re: permit ip, reject domain

2013-05-30 Thread Peter
On 05/31/2013 12:34 PM, Noel Jones wrote: No, the client is already authorized by IP. Adding a sender domain check is an additional restriction. This is also a simple "some trusted IP is sending a bunch of crap" trigger. Good advice, but SASL is not always possible or practical. And solving th

Re: permit ip, reject domain

2013-05-30 Thread Noel Jones
On 5/30/2013 6:21 PM, Peter wrote: > On 05/31/2013 03:50 AM, Feel Zhou wrote: >> I don't think that document is good to fix this problem >> I want sender address match my customer's domain name >> If not match ,mean that sender address was fake > > Hi Tom, > > This is a bad idea, it is very easy

Re: permit ip, reject domain

2013-05-30 Thread Peter
On 05/31/2013 03:50 AM, Feel Zhou wrote: I don't think that document is good to fix this problem I want sender address match my customer's domain name If not match ,mean that sender address was fake Hi Tom, This is a bad idea, it is very easy for a spammer to spoof your customer's sender doma

Re: permit ip, reject domain

2013-05-30 Thread Noel Jones
On 5/30/2013 6:39 AM, Feel Zhou wrote: > Hello, My friend > > This is Tom, I'm sending my greeting from China > I Use postfix for few month, My customer send mail via my mail > server, So, some IP is in mynetworks setting. for example, > my_customer_server_ip is permit send mail via my server But

Re: permit ip, reject domain

2013-05-30 Thread Feel Zhou
Thanks,Mikael I don't think that document is good to fix this problem I want sender address match my customer's domain name If not match ,mean that sender address was fake Thanks for your help Tom 2013/5/30 Mikael Bak > On 05/30/2013 01:39 PM, Feel Zhou wrote: > [snip] > > > > My purpose is per

Re: permit ip, reject domain

2013-05-30 Thread Mikael Bak
On 05/30/2013 01:39 PM, Feel Zhou wrote: [snip] > > My purpose is permit my_customer_ip send mail via my mail server, only > permit my customer domain address send mail, reject any other domain > send mail via my_customer_ip, how can I setting in my postfix. > > Thanks a lot > Tom > Hi Tom, I

permit ip, reject domain

2013-05-30 Thread Feel Zhou
Hello, My friend This is Tom, I'm sending my greeting from China I Use postfix for few month, My customer send mail via my mail server, So, some IP is in mynetworks setting. for example, my_customer_server_ip is permit send mail via my server But there is something serious with my postfix server