SV: SV: SV: SV: block emails which pretend to originate from my domain

2016-11-19 Thread Sebastian Nielsen
Yeah. The OP presumably had his "permit_sasl_authenticated" both in sender restrictions and relay restrictions. Thats why I gave a example of sender restrictions where I also said that every instance of permit_sasl_authenticated need to be replaced (For example, if one is in recipient restrictions

Re: SV: SV: SV: block emails which pretend to originate from my domain

2016-11-19 Thread /dev/rob0
On Sat, Nov 19, 2016 at 01:33:34PM -0600, /dev/rob0 wrote: > A much simpler and better way to do this and to force the use of > submission for your clients is to change the default on port 25, > and to override relay restrictions in master.cf for submission, > port 587: > > main.cf : > > [

Re: SV: SV: SV: block emails which pretend to originate from my domain

2016-11-19 Thread /dev/rob0
[ top-posting fixed ] > -Ursprungligt meddelande- > [mailto:owner-postfix-us...@postfix.org] För /dev/rob0 > > On Thu, Nov 17, 2016 at 05:31:43PM +0100, Sebastian Nielsen wrote: > > The advantage with using "permit_sasl_authenticated, reject" as > > check_sender_access in the global

SV: SV: SV: block emails which pretend to originate from my domain

2016-11-19 Thread Sebastian Nielsen
ostfix-us...@postfix.org] För /dev/rob0 Skickat: den 19 november 2016 19:34 Till: postfix-users@postfix.org Ämne: Re: SV: SV: block emails which pretend to originate from my domain On Thu, Nov 17, 2016 at 05:31:43PM +0100, Sebastian Nielsen wrote: > The advantage with using

Re: SV: SV: block emails which pretend to originate from my domain

2016-11-19 Thread /dev/rob0
On Thu, Nov 17, 2016 at 05:31:43PM +0100, Sebastian Nielsen wrote: > The advantage with using "permit_sasl_authenticated, reject" as > check_sender_access in the global config, is that authenticated > senders won't be able to send with a adress outside of your domain > either, thus achieving

Re: SV: SV: block emails which pretend to originate from my domain

2016-11-17 Thread Phil Stracchino
On 11/17/16 11:31, Sebastian Nielsen wrote: > > The advantage with using "permit_sasl_authenticated, reject" as > check_sender_access in the global config, is that authenticated senders won't > be able to send with a adress outside of your domain either, thus achieving > both local spoof

SV: SV: block emails which pretend to originate from my domain

2016-11-17 Thread Sebastian Nielsen
o prevents foregin spoof from authenticated users. -Ursprungligt meddelande- Från: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] För Phil Stracchino Skickat: den 17 november 2016 17:26 Till: postfix-users@postfix.org Ämne: Re: SV: block emails which pretend to orig