LuKreme a écrit :
> 
> On 18-Apr-2009, at 00:01, Barney Desmond wrote:
> [snip]
> 
>> Remove the LAN from $mynetworks (if it's there), thus forcing everyone
>> to be unprivileged. As long as example.local isn't in $mydestination,
>> it should be forced to rely on $virtual_alias_domains, which you
>> specify per-recipient mappings for.
> 
> Yeah, that sounds right. How do I ensure that the sender address is also
> in the $virtual_alias_domains?
> 

smtpd_reject_unlisted_sender = yes


>> * Mail to local destinations that match $inet_interfaces or
>> $proxy_interfaces, $mydestination, $virtual_alias_domains, or
>> $virtual_mailbox_domains.
> 
> Hmm... that's I guess what I am wondering about
> 
>> The only thing I'm unsure about there is the "match $inet_interfaces"
>> - if example.local == $inet_interfaces, will it short circuit the
>> check for virtual_alias_domains?
>>

you need to reread that piece of documentation. there is no short circuit.

> 
> And that's another one.  Well, at this point I think the thing to do is
> set it up and see how b0rked I can get it, then post back with postconf
> -s :)
> 

Reply via email to