Victor Duchovni:
> On Wed, Jun 01, 2011 at 04:40:20PM +0200, Patrick Ben Koetter wrote:
>
> > > Otherwise, this looks doable, modulo fine-tuning the specific parameter
> > > names.
> >
> > That's great news. What do you think about the idea to create another
> > mapping
> > from envelope senders to IP addresses? It fits into the scheme of identity
> > mapping, but is it useful?
>
> I am not a big fan of this. At the very least this would need to map
> to a list of CIDR blocks, rather than single IP addresses, but I don't
> see much point. An IP address is not an identity IMHO, a client should
> authenticate with SASL when access is selective.
I agree: a sender is not an IP address. We use authentication to
get positive evidence about who or what is sending email.
Whitelisting by IP address is OK for postscreen, because that is
merely a filter that decides if one can talk to Postfix at all.
Wietse
