:-) My postfix hostname is `mail.my.domain'.
DNS settings result in redirecting not only mail to `some...@mail.my.domain' but also mail addressed to: `sm...@programmers.my.domain', `jo...@office.my.domain', etc to this host. `virtual_alias_maps' allow resolving: sm...@programmers.my.domain -> smith jo...@office.my.domain -> jones etc. `sender_canonical_maps' do similar mappings for outgoing mail. I offer roundcube as a webmail. If people log into roundcube and accept default config, then for outgoing mail their `MAIL FROM' is set to `....@mail.my.domain'. Then thanks to canonical it is re-mapped as shown above. OK till now. I'd like to use the `reject_sender_login_mismatch' restriction. My problem is: it is applied before canonical does its work. So it seems that `smtpd_sender_login_maps' cannot use the same source as `virtual_alias_maps' but also a similar source but with the mappings for `mail.my.domain': sm...@mail.my.domain -> smith jo...@mail.my.domain -> jones The problem is that my sources are LDAP attributes. Each user has approx 10-20 mail aliases stored in their `mail' attribute. I have approx 2000 users. I'm not happy I have to double those attributes for this purpose... Is there any way to avoid it? Best regards, Marek