Tony Earnshaw wrote:

smtps    inet       n       -       n       -       -       smtpd
     -o smtpd_tls_wrappermode=yes
     -o smtp_host_lookup=dns
     -o smtpd_sender_restrictions=permit_sasl_authenticated,reject

Postfix special:


-o smtpd_sender_restrictions=permit_sasl_authenticated,reject

Should be:

# -o smtpd_sender_restrictions=permit_sasl_authenticated,reject

Like it don't work proper. Without deleting/commenting it out, forgery works, even with SQM.

Deleting it or commenting it out, forgery doesn't work, forgers are jailed and mail about each foiled send attempt sent to postmaster. /Including SQM/. Depending on your config ;)

Remember? postfix-2.0.16-20031022, patched with Liviu Daia's patch.reject_sender_login_mismatch.2. 'Course TLS patch, 'course SASL declaration while compiling source. And for me personally: 'Course LDAP.

My main.cf for anti-forgery (the rest is "standard"):

smtpd_sender_restrictions =
  ## !!! before Liviu's patch
# reject_sender_login_mismatch - inhibits mail!!
  ## !!! new Liviu patch
  reject_authenticated_sender_login_mismatch
  ## !!! new Liviu patch - inhibits mail!!
# reject_unauthenticated_sender_login_mismatch
  reject_unknown_sender_domain
  permit_mynetworks
  reject_non_fqdn_sender

--Tonni

--
Tony Earnshaw

Do not CC me or your mail will probably be rejected.
I don't like this, either. Blame it on Swen and a slow
Internet connection.

http://www.billy.demon.nl
Mail: billy-at-billy.demon.nl



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to