Postfix, reject some system users?

Chowroc · 01-28-2005, 01:11 PM

With Postfix, I want to restrict some system users to be rejected while sending mail. I think I should disallow all users of the domain at first, then permit some in the db tables.

smtpd_sender_restrictons & smtpd_client_restrictions may be the very parameters to do this, so I configure:

Code:

/etc/postfix/main.cf:
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_access, reject
smtpd_client_restrictions = check_client_access hash:/etc/postfix/client_access, reject

/etc/postfix/sender_access:
/*@zouben.org/  REJECT

/etc/postfix/client_access:
zouben.org REJECT

But there is no effect?

Please tell me how to achieve this goal.

Thanks.

peter_robb · 01-28-2005, 01:26 PM

Did you make hashed files from the text files?

see man postmap

Chowroc · 01-28-2005, 03:58 PM

Yes, of course.

# postmap -q zouben.org client_access
REJECT
# postmap -q roc@zouben.org sender_access
...(nothing)

So I think the regular expression has some problems?

Chowroc · 02-01-2005, 07:54 AM

If config like this:

Code:

/etc/postfix/main.cf
smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/sender_access, reject

/etc/postfix/sender_access:
PERMIT_USER@DOMAIN.com       OK

This only has effect to the header.

For example, roc and Mu01 both the legal system user, so both of them can be authenticated by SASL. To Mu01, I use mutt + esmtp, and esmtp like this:

Code:

        hostname = mail.DOMAIN.com:25
        username = "Mu01"
        password = "PASS"

If Mu01 mail as:
FROM: Mu01@DOMAIN.com
He will been reject.

But if he mail as:
FROM: roc@DOMAIN.com
Well, he is permitted!

How can Postfix authorize access based on SASL authentication?

Thanks.