Re: Restrict sending to one address from one IP?

2 msg	SQL query as alias
3 msg	Mailfrom restriction and SASL clients
4 msg	How to inform outside users that domain soon wi...
31 msg	ASSP and NOOP
9 msg	Double restrictions for SMTP Authen question ?
5 msg	Resend 'virus' mails
3 msg	message_size_limit exceptions
53 msg	about greylist.pl and alternatives
7 msg	failing to send a large mail
1 msg	Re: Another weird cert question

Restrict sending to one address from one IP?
\ Kenton Brede (29 May 2007)
. \ Noel Jones (29 May 2007)

6 msg	Forcing PIX workarounds?
4 msg	header checks are not working
9 msg	recipient_delimiter
3 msg	Documenting alias expansion in mails
5 msg	Domain Change Notification
4 msg	How to do a defer_if_permit with a SMTP code 451?
4 msg	virtual: mbox fine, maildir generates 'fatal: g...
5 msg	Multiple relays and rate control with anvil
19 msg	550

Subject:	Re: Restrict sending to one address from one IP?
Group:	Postfix-users
From:	Noel Jones
Date:	29 May 2007

At 10:30 AM 5/29/2007, Kenton Brede wrote:
>I've got this situation in which I need to set up an address for
>announcements. What I've done is create a Mailman list and set it to
>only allow messages to notes sent from
>daily. daily is actually an alias
>set up in /etc/aliases pointed to /dev/null and is the return address.
>I have postfix set up so that it will only receive mail for user
>aliases in virtual_alias_maps. Also "mynetworks =
>/etc/postfix/access" contains the machines that are allowed relay
>access on our network.
>
>The above setup prevents anyone outside our network, and not
>explicitly allowed to relay, from sending messages to
>notes. But the machines allowed relay privileges in
>/etc/postfix/access, can spoof the sender as daily,
>and send mail to notes.
>
>Is it possible to restrict machines which are allowed to relay on our
>network from sending to notes?
>
>In short if I could restrict sending to notes from
>the server itself, and allow no other machines period, it would be
>great.
>Thanks,
>Kent

If mail from the local server is injected by the sendmail(1) command,
you can simply reject *any* attempt to send with the special sender
address via SMTP.
# main.cf
smtpd_sender_restrictions =
check_sender_access regexp:/etc/postfix/forbid_sender

# forbid_sender
/^daily$/ REJECT internal list only

If you must selectively reject based on the client IP, please see the
general instructions:
http://www.postfix.org/RESTRICTION_CLASS_README.html

--
Noel Jones