Hi all.
I have a problem with proper configuration of smtpd_sender_login_maps. I
think i don't understand correctly what should be inside the hash file from
smtpd_sender_login_maps. I use this parameters:
smtpd_sender_login_maps = hash:/etc/postfix/files/sender_login_maps
smtpd_sender_restrictions =
permit_mynetworks
reject_sender_login_mismatch
permit_sasl_authenticated
reject_unauth_pipelining
reject_non_fqdn_sender
reject_unknown_sender_domain
#reject_sender_login_mismatch
#check_sender_access hash:/etc/postfix/files/sender_checks
permit
I would like to permit connections only when login (for example 'test'
system account) equals 'mail from:<t...@my_domain.something>'. I put inside
the mentioned file:
test test
and later (when the above hasn't worked)
t...@my_domain.something test
and used postmap. When I try to make a connection using telnet the
'auth plain xxx'
(I used user test and his password 'password' to generate 'xxx' with 'perl
-MMIME::Base64 -e 'print encode_base64("\000test\000password")'')
gives
'235 2.0.0 Authentication successful'
so user test is authenticated properly but mail
from:<t...@my_domain.something> gives
'553 5.7.1 <t...@my_domain.something>: Sender address rejected: not owned by
user t...@my_domain.something'.
Could anyone help? Is there a way to use a regular expression inside
/etc/postfix/files/sender_login_maps so that with one line (or more ;)) all
my user (system in this configuration) accounts must authenticate using
THEIR (not ANY CORRECT) user/password pair?
What should be inside /etc/postfix/files/sender_login_maps to allow user
'test' to send mail with his user/password pair when $mydestination for
example has two domains (my_domain.something, my_domain.other) and I would
like to permit this user to use:
mail from:<t...@my_domain.something>
and
mail from:<t...@my_domain.other>
with one user/password pair? (test/password)
I currently get a lot of spam from and to my system users authenticated with
NOT THEIR user/password pairs so I think that smtpd_sender_login_maps could
be very helpful.
Thank you for your help ;)
With regards,
R.