Re: Sender address spoofing with smtp auth problem

[Bu Xiaobing]

On 2013-5-23 21:47, Viktor Dukhovni wrote:

On Thu, May 23, 2013 at 07:30:18PM +0800, Bu Xiaobing wrote:

I want to let the sender address equal to the log-in name, the
following are some mainly settings in my main.cf,

smtpd_tls_security_level = may
smtpd_recipient_restrictions =
        permit_sasl_authenticated,
        reject_unauth_destination,
        reject_sender_login_mismatch
smtpd_sender_login_maps = hash:/etc/postfix/test

Order matters, the "reject_sender_login_mismatch" restriction will only
apply to unauthenticated users, since no further restrictions are processed
after "permit_sasl_authenticated" returns "OK". Try:

     smtpd_recipient_restrictions =
        reject_sender_login_mismatch,
        permit_sasl_authenticated,
        reject_unauth_destination

It works, I try to put the rule reject_sender_login_mismatch at the front of 
others, and it works!

The rules works such as they are in iptables.

Thanks!