On Sat, Mar 15, 2014 at 12:47:44AM +0100, Sergei wrote: > > Either the message is rejected by another restriction as shown in > > the log, or your smtpd_sender_login_maps is matching everything. > > http://www.postfix.org/postconf.5.html#smtpd_sender_login_maps > > I turned on debug output and as far as I can see sender_login_maps > returns 0 rows and the error message states "Sender address rejected" > so the sender restrictions must be causing this.
There are two parts to reject_sender_login_mismatch: - Reject when sender address has a known but different owner. - Reject when login is not using an owned sender. You're forgetting the second part. Postfix 2.11 includes a new restriction primitive: http://www.postfix.org/postconf.5.html#reject_known_sender_login_mismatch Apply the reject_sender_login_mismatch restriction only to MAIL FROM addresses that are known in $smtpd_sender_login_maps. This feature is available in Postfix version 2.11 and later. This may be closer to what you want. Note it allows authenticated users to send from any address that is not explicitly owned by someone else. -- Viktor.