Re: smtpd_sender_restrictions some help needed

2013-03-18 Thread Per olof Ljungmark
On 2013-03-18 17:55, Per olof Ljungmark wrote: > On 2013-03-18 12:07, Wietse Venema wrote: >> Per olof Ljungmark: I'd recommend separating authenticated from unauthenticated submission. Enable submission (port 587) with authentication required, and remove permit_sasl_authenticated fr

Re: smtpd_sender_restrictions some help needed

2013-03-18 Thread Per olof Ljungmark
On 2013-03-18 12:07, Wietse Venema wrote: > Per olof Ljungmark: >>> I'd recommend separating authenticated from unauthenticated submission. >>> Enable submission (port 587) with authentication required, and remove >>> permit_sasl_authenticated from the smtpd instance on port 25. For the >>> submiss

Re: smtpd_sender_restrictions some help needed

2013-03-18 Thread Wietse Venema
Per olof Ljungmark: > > I'd recommend separating authenticated from unauthenticated submission. > > Enable submission (port 587) with authentication required, and remove > > permit_sasl_authenticated from the smtpd instance on port 25. For the > > submission port you could enable reject_sender_logi

Re: smtpd_sender_restrictions some help needed

2013-03-18 Thread Per olof Ljungmark
On 2013-03-17 11:05, Ansgar Wiechers wrote: > On 2013-03-17 Per olof Ljungmark wrote: >> We've had a working configuration since a few years where we allow >> authenticated users to relay mail even if the sender address does not >> match a local user and the recipient is non-local. >> >> Now this i

Re: smtpd_sender_restrictions some help needed

2013-03-17 Thread Ansgar Wiechers
On 2013-03-17 Per olof Ljungmark wrote: > We've had a working configuration since a few years where we allow > authenticated users to relay mail even if the sender address does not > match a local user and the recipient is non-local. > > Now this is about to change. > > So, if the sender is *auth

smtpd_sender_restrictions some help needed

2013-03-17 Thread Per olof Ljungmark
Hi all, We've had a working configuration since a few years where we allow authenticated users to relay mail even if the sender address does not match a local user and the recipient is non-local. Now this is about to change. So, if the sender is *authenticated*: - from local-user@local-domain t