On 7/8/06, DJ Lucas <[EMAIL PROTECTED]> wrote:
Right now I force auth for smtp relay anyway, so users should see
absolutely no change. Basically, what I want is if the sender's address
contains 'lucasit.com' and the recipient address contains 'lucasit.com'
then I want to jump ship if the client hasn't authenticated. I don't
even want to provide an error message, just drop the connection cold.
Is this possible? This obviously should not happen if 'lucasit.com'
appears only in the recipient list. I'm not sure if there is a key
phrase to search for for this functionality. 'local relay' and 'smtp
auth' maybe? Didn't return anything obvious.
I'm not sure I'm exactly following you. Are you saying that local mail
all gets relayed right now?
Since I'm not exactly sure what you're asking, I'll just carrying on
with what my setup is and maybe it'll point you in the right
direction. Since I want to relay outgoing mail through my ISP's mail
server, I set ([] suppresses dns lookup since it would be excessive to
do it every time)
relayhost = [my.isp.net]
To get authentication to that server, I have these settings:
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
noanonymous,
noplaintext
smtp_sasl_tls_security_options = noanonymous
My credentials are stored in /etc/postfix/sasl_passwd. Later there's
some configuration for TLS.
When mail is sent locally, from one user to another, it doesn't get
relayed to my isp. However, local is simply on this box. I don't
really know how it would be handled on a LAN. I think as long as the
address the mail is being sent to is in $mynetworks, it is considered
local.
So, you could set mynetworks = 192.168.0.0/24 if you had a lan (see
also mynetworks_style). All mail with a source and destination in
$mynetworks would not go through $relayhost.
HTH.
--
Dan
--
http://linuxfromscratch.org/mailman/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page