I just wanted to make sure I've read the docs
<https://www.postfix.org/postconf.5.html#check_sasl_access> correctly. I'd
like to restrict a couple of sasl users by IP4/6 (I can't test this on my
sandbox setup), so if I have this in my master.cf:

submission      inet    n       -       n        -      -       smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sender_restrictions=
  -o smtpd_milters=
  -o { smtpd_client_restrictions=
         check_sasl_access hash:/etc/postfix/sasl_access
   }
  -o { smtpd_recipient_restrictions=
         reject_non_fqdn_recipient
         reject_unknown_recipient_domain
         permit_sasl_authenticated
         reject
     }

And have the following in my access file:

user1 192.x.x.x     PERMIT
user1 2001:x:x:x::x PERMIT
user1 REJECT

(smtpd_sasl_local_domain is blank)

Will that work OK?
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to