Daniel Sepeur wrote:

>Hmmmm ... i think i dont understand this right.
>If i want to have this working, its a must to send an email from a 
>different IP than the servers IP?
>All mals wich come from the local machine (including PHP mail 
>function and so on) wont force policy requests?

You need to send mail by using SMTP to one of the machine's local 
addresses, rather than submitting it as a local mail.

Now, stepping well outside my area of expertise ...
The default for a lot of software is that it will use some sort of 
"drop a mail in the queue" type function. With Postfix installed, 
there is "sendmail", and from it's man page :

DESCRIPTION
   The Postfix sendmail(1) command implements the Postfix to
   Sendmail compatibility interface.  For the sake of compatibility
   with existing applications, some Sendmail command-line options
   are recognized but silently ignored.

   By default, Postfix sendmail(1) reads a message from
   standard input until EOF or until it reads a line with
   only a . character, and arranges for delivery.  Postfix
   sendmail(1) relies on the postdrop(1) command to create
   a queue file in the maildrop directory.

So when you send a mail using that option, the message never touches 
any of the smtpd_* settings you've configured.

However, if the software sends a mail by opening a TCP connection and 
sending the message using SMTP, then it will follow all the settings 
you've set.

So you'll need to restrict what software is allowed to do - 
specifically blocking the use of local queue submissions. You're 
users will moan at this since many of them will be running software 
which assumes there will be such a function available.

On the flip side, I've also had issues with users that write their 
own smtp client and then moan when it can't handle mandatory elements 
of the protocol spec because the've assumed an error free universe !

-- 
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.
_______________________________________________
Users mailing list
[email protected]
http://lists.policyd.org/mailman/listinfo/users

Reply via email to