Re: Per user relaying rules

7 msg	Alternative SMTP port
4 msg	regexp sender_bcc map not working
14 msg	rDNS checks cause delays
4 msg	Question regarding parallelism in smtpd_recipie...
7 msg	Reject before DNS resolution
5 msg	postfix/pick: warning maildrop/foo: permission ...
4 msg	unknown or not unknown? canonical name-resolution
3 msg	Authenticating users from specific group in LDAP
15 msg	is zen.spamhaus.org down ?
2 msg	postfix relay mantainig the domain
4 msg	transport_maps and mailbox
10 msg	inet_interfaces: no local interface found for

Per user relaying rules
\ Neil Williams (30 Aug 2007)
. \ Noel Jones (30 Aug 2007)
. . \ Neil Williams (2 Sep 2007)

2 msg	postfix blocking relay
2 msg	Relay host question
4 msg	SMTP Diagnostics
3 msg	how to get pickup/cleanup messages into policy ...
4 msg	Need to relay some, deliver others
5 msg	SASL and postfix problem: no applicable SASL me...
5 msg	Closing SMTP connection immediately on blacklis...

Subject:	Re: Per user relaying rules
Group:	Postfix-users
From:	Noel Jones
Date:	30 Aug 2007

At 01:38 PM 8/30/2007, Neil Williams wrote:
>Dear postfix-users
>
>My Postfix server allows relaying by authenticated remote SMTP
>clients, because main.cf has:
>
>smtpd_recipient_restrictions=permit_mynetworks,
>permit_sasl_authenticated, reject_unauth_destination
>smtpd_sasl_auth_enable=yes
>smtpd_sasl_security_options=noanonymous
>
>This way all of the users (virtual mailbox owners) can set their MUA
>to use my system as their outgoing server (if they supply a username
>and password).
>
>What should I do if I would like to restrict this relaying access to
>only a few users on the system?

The simple way would be to replace "permit_sasl_authenticated" with a
check_sender_access map.
# main.cf
smtpd_recipient_restrictions =
permit_mynetworks
check_sender_access hash:/etc/postfix/allowed_sasl_senders
reject_unauth_destination

# allowed_sasl_senders
user1 permit_sasl_authenticated
user2 permit_sasl_authenticated

You may want to also restrict which authenticated users can use which
login ID by using smtpd_sender_login_maps and
reject_sender_login_mismatch. This would prevent user3
from sending mail claiming to be from user2. This may or
may not be needed in your environment.

--
Noel Jones