Re: permit ip, reject domain

2013-07-08 Thread Feel Zhou
Thanks for Noel Jones About ip match domain, It's working now. /etc/postfix/main.cf smtpd_sender_restrictions = check_client_access cidr:/etc/postfix/enforce_ip_match_domain smtpd_restriction_classes = example example = check_sender_access

Re: permit ip, reject domain

2013-06-07 Thread Noel Jones
On 6/6/2013 9:36 PM, Feel Zhou wrote: Thanks Noel one more thing, How to setting one IP bind two or three domain Thanks a lot ... # require_sender_A A.example.com http://A.example.com OK C.example.com OK -- Noel Jones

Re: permit ip, reject domain

2013-06-06 Thread Feel Zhou
Thanks for all I have read the document http://www.postfix.org/RESTRICTION_CLASS_README.html Maybe it's not what I need to setting. I don't have internal email distribution list, so do not need to protect it. And I don't want to restrict any user send mail to off-site destinations. My customer

Re: permit ip, reject domain

2013-06-06 Thread Noel Jones
On 6/6/2013 4:02 AM, Feel Zhou wrote: Thanks for all I have read the document http://www.postfix.org/RESTRICTION_CLASS_README.html Maybe it's not what I need to setting. I don't have internal email distribution list, so do not need to protect it. And I don't want to restrict any user send

Re: permit ip, reject domain

2013-06-06 Thread Feel Zhou
Thanks Noel one more thing, How to setting one IP bind two or three domain Thanks a lot 2013/6/6 Noel Jones njo...@megan.vbhcs.org On 6/6/2013 4:02 AM, Feel Zhou wrote: Thanks for all I have read the document http://www.postfix.org/RESTRICTION_CLASS_README.html Maybe it's not what I

permit ip, reject domain

2013-05-30 Thread Feel Zhou
Hello, My friend This is Tom, I'm sending my greeting from China I Use postfix for few month, My customer send mail via my mail server, So, some IP is in mynetworks setting. for example, my_customer_server_ip is permit send mail via my server But there is something serious with my postfix server

Re: permit ip, reject domain

2013-05-30 Thread Feel Zhou
Thanks,Mikael I don't think that document is good to fix this problem I want sender address match my customer's domain name If not match ,mean that sender address was fake Thanks for your help Tom 2013/5/30 Mikael Bak m...@inbox.lv On 05/30/2013 01:39 PM, Feel Zhou wrote: [snip] My

Re: permit ip, reject domain

2013-05-30 Thread Noel Jones
On 5/30/2013 6:39 AM, Feel Zhou wrote: Hello, My friend This is Tom, I'm sending my greeting from China I Use postfix for few month, My customer send mail via my mail server, So, some IP is in mynetworks setting. for example, my_customer_server_ip is permit send mail via my server But there

Re: permit ip, reject domain

2013-05-30 Thread Peter
On 05/31/2013 03:50 AM, Feel Zhou wrote: I don't think that document is good to fix this problem I want sender address match my customer's domain name If not match ,mean that sender address was fake Hi Tom, This is a bad idea, it is very easy for a spammer to spoof your customer's sender

Re: permit ip, reject domain

2013-05-30 Thread Noel Jones
On 5/30/2013 6:21 PM, Peter wrote: On 05/31/2013 03:50 AM, Feel Zhou wrote: I don't think that document is good to fix this problem I want sender address match my customer's domain name If not match ,mean that sender address was fake Hi Tom, This is a bad idea, it is very easy for a

Re: permit ip, reject domain

2013-05-30 Thread Peter
On 05/31/2013 12:34 PM, Noel Jones wrote: No, the client is already authorized by IP. Adding a sender domain check is an additional restriction. This is also a simple some trusted IP is sending a bunch of crap trigger. Good advice, but SASL is not always possible or practical. And solving