Alexandru Constantinescu wrote:

> smtpd_recipient_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
> reject_unauth_destination,
> permit_mx_backup, 
> permit_auth_destination,
> check_policy_service inet:127.0.0.1:10031,

The problem is you allow sasl users (and people in my networks)
to bypass all your restrictions completely..

smtpd_recipient_restrictions =
  check_policy_service inet:127.0.0.1:10031,
  permit_mynetworks,
  permit_sasl_authenticated,
  check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
  reject_unauth_destination,
  permit_mx_backup,
  permit_auth_destination,
  [..]

On a side note, you really should re-look at your restrictions
as there appears to be a number of problems / oversights.
(Post your config to the Postfix mailing list for people to
  look over)

Cami

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to