Wietse Venema:
> Rudy Gevaert:
> > Hello,
> >
> > I was wondering if I could add a access map (to deny access in fact) for
> > specific sasl authenticated users?
>
> Adding check_sasl_sender_access support would not be difficult.
> It just hasn't been done yet.
Well, it's done now.
check_sasl_access type:table
Use the remote SMTP client SASL user name as lookup key for the
specified access(5) database. The lookup key has the form "user-
name@domainname" when the smtpd_sasl_local_domain parameter
value is non-empty. Unlike the check_client_access feature,
check_sasl_access does not perform matches of parent domains or
IP subnet ranges. This feature is available with Postfix ver-
sion 2.11 and later.
The most common action would be "REJECT" or "HOLD". But it would
also work with "FILTER" (override routing) and other access map
actions.
I have a patch that should also work with other Postfix releases at
ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20131028-check-sasl-access-patch
Wietse
