zasilani na alias pouze z vlastni domeny

[Petr Simek]

On Wed, 3 Jan 2007, Jan Volešák wrote:

> Dobry den,
> mel byste nekdo radu jak provest to, aby se na jeden alias (all na domena1.cz) dalo posilat pouze z cokoliv na domena1.cz?
>  Je tam postfix, amavis, clamav, spamassassin.
> Diky za posun spravnym smerem.

Ja mam v postfixu u prijemcu rozdelovaci seznam :

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,
                               check_recipient_access hash:/etc/postfix/access-global-user_divide-DB,
                               check_relay_domains

v tom seznamu access-global-user_divide-DB mam nektere uzivatele prirazene
do trid :

...
root@                spamhater
hostmaster@          spamhater
bin@                 localmail
daemon@              localmail
nobody@              localmail
...

pak mam definovane tridy :

smtpd_restriction_classes = spamhater,spamfriend,localmail

a pro tyto tridy navic pravidla podle kterych se ten mail bude posuzovat
napr :

spamhater = check_sender_access hash:/etc/postfix/access-global-sender_access,
            check_client_access hash:/etc/postfix/access-spamhater-client_machines-and-sender_domains,
            check_sender_access hash:/etc/postfix/access-spamhater-client_machines-and-sender_domains,
            reject_unknown_client,
            permit

localmail = check_client_access hash:/etc/postfix/access-localmail-client_machines-and-sender_domains,
            check_sender_access hash:/etc/postfix/access-localmail-client_machines-and-sender_domains,
            reject

no a treba u te tridy localmail mam v access-localmail-client_machines-and-sender_domains
nasledujici :

jcu.cz                       OK
cas.cz                       OK
160.217                      OK
147.231.250                  OK
147.231.251                  OK
147.231.252                  OK
195.113.100                  OK
195.113.101                  OK

takze pokud sender IP a domena splni ty limity tak projde jinak narazi na
reject.

> Honza Volesak


*------------------------------------------------------------------------*
|                          Petr Simek   APS JU                           |
|                             psimek na jcu.cz                              |
*------------------------------------------------------------------------*