Re: reject_sender_login_mismatch on certain domains only

[mouss [Permanent Link]]

John Thomas wrote:
> I am hosting mail for friends and family on Postfix 2.3.3.  I would 
> like to turn on reject_sender_login_mismatch, but only for certain 
> domains. Could I trouble you for a short howto?
smtpd_restriction_classes = verify_login

smtpd_sender_restrictions =
   check_recipient_access hash:/etc/postfix/special_domains


verify_login =
   check_client_access hash:/etc/postfix/client_whitelist
   reject_sender_login_mismatch


== special_domains
domain1.example      verify_login
domain2.example      dunno
sub.domain2.example   verify_login
domain3.example      verify_login
.domain3.example      verify_login


(the leading 'dot' is to be used in relation with 
parent_domain_matches_subdomains. see docs for more info).

the client_whitelist should be used if you have internal relays that 
should be whitelisted (they can't use a sender=login).  otherwise, 
remove the line.