smtpd_restriction_classes and local delivery

3 msg	Postfix + cyrus imapd data format error. Comman...
18 msg	Inverse access restrictions?
9 msg	forward only certain user's email to google app...
4 msg	Postfix + MySQL engine type

smtpd_restriction_classes and local delivery
\ frantisek holop (10 Apr 2007)
. \ mouss (10 Apr 2007)
. . \ frantisek holop (10 Apr 2007)
. . \ frantisek holop (11 Apr 2007)
. . . \ Benny Pedersen (11 Apr 2007)
. . . . \ frantisek holop (11 Apr 2007)
. . . . . \ (Wietse Venema) (11 Apr 2007)
. . . . . . \ frantisek holop (11 Apr 2007)
. . . . . . . \ (Wietse Venema) (11 Apr 2007)
. . . . . . . . \ frantisek holop (11 Apr 2007)
. . . . . . . \ mouss (11 Apr 2007)
. . . . . . . . \ (Wietse Venema) (11 Apr 2007)
. . . . . . . . . \ frantisek holop (12 Apr 2007)
. . . . . . . . . . \ (Wietse Venema) (12 Apr 2007)
. . . . . . . . . . . \ frantisek holop (12 Apr 2007)
. . . . . . . . . . . . \ mouss (12 Apr 2007)
. . . . . . . . . . . . . \ frantisek holop (12 Apr 2007)
. . . . . . . . . . . . . . \ mouss (13 Apr 2007)
. . . . . . . . . . \ Noel Jones (12 Apr 2007)
. \ Jan Cobb (10 Apr 2007)
. . \ frantisek holop (10 Apr 2007)

7 msg	transport_maps and auto reply daemon
8 msg	_sasl_plugin_load failed on sasl_auxprop_plug_init
6 msg	SMTP AUTH via LDAP
3 msg	Out: 451 Error: queue file write error
5 msg	FW: Postfix Looping Issue
9 msg	request for help - setting up postfix
6 msg	SecuritySage Guides - New Location
2 msg	Adress extension propagation with virtual alias...
10 msg	Not adding Received hdr for auth'ed users
3 msg	SPamd ?
2 msg	OT: google trends - postfix/sendmail/qmail/exim
1 msg	RE: Cached MX?
3 msg	Something wrong with my servers ?
9 msg	Outgoing Mail Scanning
10 msg	Certificate recommendation?

Subject:	smtpd_restriction_classes and local delivery
Group:	Postfix-users
From:	frantisek holop
Date:	10 Apr 2007

hi there,

i am trying to create an internal mailing list but with only
a couple of vip users as allowed senders. based on
RESTRICTION_CLASS_README i came up with the following:

/etc/postfix/main.cf:
smtpd_restriction_classes = vip_only
vip_only = check_sender_access hash:/etc/postfix/vip, reject

smtpd_helo_restrictions =
permit_mynetworks

smtpd_sender_restrictions =
reject_unlisted_sender
reject_non_fqdn_sender
reject_unknown_sender_domain

smtpd_recipient_restrictions =
check_recipient_access regexp:/etc/postfix/rcpt_checks
permit_mynetworks
reject_unauth_destination
reject_non_fqdn_recipient
reject_unknown_recipient_domain

/etc/postfix/vip:
# these are the allowed senders
adr1
adr2

/etc/postfix/rcpt_checks:
# there are a couple of .list adresses, e.g. test.list
# members of the big lists are defined in /etc/aliases (with :include),
# smaller ones are in /etc/postfix/virtual
/.*\.list/ vip_only

this seems to work ok for remote addresses (access denied),
but local users (root) can still send to test.list
even if it's not in the vip file. is this because
those mails are handled by local(8) instead of smtpd(8)?
in the readme the example is basically the same but
with a hash table instead of a regexp one..

-f
--
plus puto, minus scio -- the more i learn, the less i know