From: Victor Duchovni (no email)
Date: Tue Nov 01 2005 - 09:53:24 EST
On Tue, Nov 01, 2005 at 02:30:09PM +0000, Ed W wrote:
> Can anyone advise if this is possible under postfix? I can kind of see
> how to do most of it, but the problem seems to be that if the sasl
> authentication succeeds then the user can do anything, and if I try and
> test before that then I'm not sure how I can access the user auth info?
>
Postfix 2.1, something along the lines of:
smtpd_sender_login_maps = hash:/etc/postfix/sender_logins
smtpd_restriction_classes = restricted_sender, restricted_recipient
restricted_sender =
check_recipient_access hash:/etc/postfix/restrict_to,
defer
restricted_recipient =
check_sender_access hash:/etc/postfix/restrict_from,
defer
smtpd_sender_restrictions =
reject_sender_login_mismatch,
check_sender_access hash:/etc/postfix/access-from
smtpd_recipient_restrictions =
check_recipient_access hash:/etc/postfix/access-to,
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
...
sender_logins:
# Address SASL login name
luser
access-from:
restricted_sender
access-to:
restricted_recipient
-- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.
|
|
|