On Tue, Apr 21, 2015 at 3:38 PM, Noel Jones <njo...@megan.vbhcs.org> wrote:
> On 4/20/2015 6:39 PM, Simon wrote: > > > > > > On Tue, Apr 21, 2015 at 11:34 AM, Simon <grem...@gmail.com > > <mailto:grem...@gmail.com>> wrote: > > > > > > > > On Mon, Apr 20, 2015 at 3:51 PM, Noel Jones > > <njo...@megan.vbhcs.org <mailto:njo...@megan.vbhcs.org>> wrote: > > > > On 4/19/2015 7:03 PM, Simon wrote: > > > Hi There, > > > > > > We are using postfix 2.7.1 on debian. Is there a simple way to > block > > > emails from a domain or From address only to a certain to > address? > > > So this would match both from and to in the header to then > block the > > > email. e.g. > > > > > > From: blockt...@domain.com <mailto:blockt...@domain.com> > > <mailto:blockt...@domain.com <mailto:blockt...@domain.com>> > > > To: cli...@theirdomain.com <mailto:cli...@theirdomain.com> > > <mailto:cli...@theirdomain.com <mailto:cli...@theirdomain.com>> > > > > > > Only when blockt...@domain.com <mailto:blockt...@domain.com> > > <mailto:blockt...@domain.com <mailto:blockt...@domain.com>> > > sent an > > > email to cli...@theirdomain.com <mailto: > cli...@theirdomain.com> > > <mailto:cli...@theirdomain.com <mailto:cli...@theirdomain.com>> > > > would it get blocked, otherwise all other emails from > > > blockt...@domain.com <mailto:blockt...@domain.com> > > <mailto:blockt...@domain.com <mailto:blockt...@domain.com>> > > would be sent to > > > any other to address? > > > > You can use a restriction class to block mail for a specific > > envelope sender/recipient combination. The envelope > > addresses are > > what are logged by postfix, and may be different than what > > is in the > > From: and To: headers. > > http://www.postfix.org/RESTRICTION_CLASS_README.html > > > > If you must use the addresses listed in message headers, you > > will > > need a content filter such as SpamAssassin. > > > > > > Thanks for the reply here - I think that envelope > > sender/recipient combination would be fine :) > > > > I get the basic idea of the the restriction classes, but finding > > it difficult to figure out how to combine to get the result we > > need. Would you be able give me a head start on this one? It > > would be much appreciated! > > > > > > Just to check on this one.. so am i correct that you would set a > > restriction class for the inbound domain (say mailfrom.blockme.com > > <http://mailfrom.blockme.com>), then you would set a access list for > > that "class"? e.g. within that class block if the recipient is > > cleanu...@client.com <mailto:cleanu...@client.com>? > > > > Simon > > > A very abbreviated example done off the top of my head late at night: > > Goal: block mail with sender example.info to recipient b...@example.com > > > # main.cf > smtpd_restriction_classes = > block_bob > > block_bob = > check_recipient_access hash:/etc/postfix/bob_recipient > > smtpd_sender_restrictions = > check_sender_access hash:/etc/postfix/sender_blocks > > > # Other files: > > # bob_recipient > b...@example.com REJECT sender not allowed for this recipient > > # sender_blocks > example.info block_bob > > > Hope this is close enough to right that it helps. > > > -- Noel Jones > Thanks Noel - excellent for late at night! :) Cheers Simon
